# GDPR compliance

Nextcloud is designed to be operated fully on-premises, keeping personal data under your organisation's control. This chapter provides guidance for administrators on meeting their obligations under the General Data Protection Regulation (GDPR).

> **提示**
>
> This documentation describes Nextcloud's built-in capabilities. It does not constitute legal advice. Consult your Data Protection Officer or legal counsel to confirm that your specific deployment meets your regulatory obligations.

- [Personal data stored](/link/885)
- [Responding to data subject requests](/link/886)
- [Data retention](/link/887)
- [Helpful apps](/link/888)
- [Cookies](/link/889)