Data processing agreement — Calendly

Cited by

Facts read from this source

• Entity Report an error

  “Calendly LLC (together, with any subsidiaries and affiliated entities, collectively “Calendly” or “Processor”)”

• Effective date Report an error

  “Effective Date: June 1, 2026”

• Address Report an error

  “Address: 115 E Main St, Ste A1B, Buford, GA 30518”

• Dpf self certified Report an error

  “Calendly is self-certified under the Data Privacy Frameworks and will adhere to its obligations under the Data Privacy Frameworks.”

• Scc module Report an error

  “Module 2 of the SCCs for Controller to Processor transfers, together with the options and amendments set out in Exhibit B to this DPA, shall apply and are incorporated into this DPA.”

• Supervisory authority Report an error

  “Irish Data Protection Commission”

• Audit reports Report an error

  “Calendly shall make available to Customer (or a mutually agreed upon third-party auditor) information reasonably necessary to demonstrate Calendly’s compliance with the obligations set forth in this DPA in the form of its most recent third party audit or certification report(s) (such as SOC 2 or ISO 27001)”

• GDPR assistance Report an error

  “Calendly shall: (a) assist Customer, to a reasonable extent, in complying with its obligations with respect to EU Personal Data pursuant to Articles 32 to 36 of GDPR”

• Record of processing Report an error

  “(b) maintain a record of all categories of Processing activities carried out on behalf of Customer in accordance with Article 30(2) of the GDPR”

• List URL Report an error

  “Calendly may update its list of Sub-processors from time to time, and shall make available any updates to such list here: https://calendly.com/help/calendly-sub-processors-gdpr-ccpa”

• Objection rights Report an error

  “Customer may terminate that portion of the Services that involve the use of such Sub-processor without penalty.”

• Location of processing Report an error

  “Processing of Personal Data will occur in the United States and other jurisdictions outside the residence of the Data Subjects”

• Return destruction Report an error

  “Calendly shall return or securely destroy Personal Data, in accordance with Customer’s Instructions, upon Customer’s request or upon termination of Customer’s account(s), unless Personal Data must be retained to comply with Applicable Laws.”

• Retention criteria Report an error

  “Personal Data is retained for so long as is reasonably necessary to fulfill the purposes for which the data was collected, to perform contractual and legal obligations, and for any applicable statute of limitations periods for the purposes of bringing and defending claims.”

• Sensitive data prohibited Report an error

  “data exporter is not permitted to submit Personal Data to the Services that are considered “sensitive personal information,” “special categories of data” or analogous terms under Data Protection Laws.”

• Breach notification Report an error

  “Upon becoming aware of a Security Breach, Calendly will: (i) notify Customer of the Security Breach without undue delay”

• Security measures URL Report an error

  “Calendly will utilize commercially reasonable technical and organizational measures to maintain the security, confidentiality, and integrity of the Personal Data, the details of which are set forth at the following link: https://calendly.com/security.”

• Data subject request assistance Report an error

  “Calendly shall reasonably assist Customer with the fulfillment of Customer’s obligations in connection with a Data Subject Request in the event that Customer cannot act on such request itself using the Services.”

• Assistance costs Report an error

  “If Calendly determines in good faith that a request for assistance under this Section 7 is unreasonable, overly burdensome and outside of industry expectation for assistance with each respective matter, the parties will agree in good faith on costs to be paid by Customer to Calendly for such assistance.”

3 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Independent Consultant European sovereignty
• The Data Protection Officer Integrations, API & data export
• The Data Protection Officer European sovereignty
• The Practice Owner European sovereignty
• The Sales Team Lead European sovereignty
• The Salon Owner European sovereignty
• The Skeptic European sovereignty