Data processing agreement — Tally

Cited by

Facts read from this source

• Entity Report an error

  “Tally a company under Belgian law, Besloten Vennootschap, whose registered office is at Sint-Pietersnieuwstraat 11, 9000 Gent, Belgium registered in the Crossroads Bank for Enterprises under enterprise number 0776.979.007”

• DPA available Report an error

  “Data Processing Agreement Last updated - 9/09/2024”

• GDPR regulation Report an error

  “pursuant to the Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data”

• Breach notification Report an error

  “the PROCESSOR shall notify the CONTROLLER without undue delay after becoming aware of a Personal Data Breach”

• Dpia assistance Report an error

  “the PROCESSOR shall assist the CONTROLLER as it carries out a Data Protection Impact Assessment in accordance with Article 35 of the Regulation. However, the PROCESSOR, at its own discretion, is free to charge additional costs for the performance of these services”

• Categories Report an error

  “Hosting service providers Payment service providers Communication service providers”

• Substantial change notice Report an error

  “If the PROCESSOR wishes to change or involve a new Substantial Subprocessor, the CONTROLLER shall be notified thereof and be given the opportunity to communicate any reasonable concerns”

• Sccs Report an error

  “Such transfer shall be governed by the terms of a data transfer agreement containing standard contractual clauses as published in the Decision of the European Commission of June 4, 2021 (Decision (EU) 2021/914)”

• Audit independent Report an error

  “The PROCESSOR shall appoint every two (2) years an independent auditor to perform such audit. The final results of such audit report (without any confidential information) shall be communicated to the CONTROLLER upon first request. The PROCESSOR shall bear the costs of such audit.”

• Customer audit conditions Report an error

  “The CONTROLLER shall only have a right to audit the PROCESSOR if the CONTROLLER has justifiable grounds to request such audit and if such grounds are communicated and demonstrated in writing to the PROCESSOR”

• Deletion return Report an error

  “At the choice of CONTROLLER, the PROCESSOR shall delete or return all the Personal Data to the CONTROLLER after the end of the provision of Services in relation to processing, and deletes existing copies, and will certify that it has done so”

• Processing activities Report an error

  “Account creation and management Form creation, distribution and completion Data storage”

• Categories Report an error

  “(Electronic) identification data Form data”

• Subjects Report an error

  “People making use of TALLY’s Services (form creators and form respondents)”

• Anonymization on end Report an error

  “the PROCESSOR shall anonymise or pseudonymise to a maximum extent the Personal Data it has received or obtained in the performance of the Services”

• Tom encryption Report an error

  “In higher risk situations TALLY has supplemented existing access controls with encryption solutions both for data at rest as in transit.”

• Tom MFA Report an error

  “TALLY ensures that key resources that support the Services are protected by multi-factor authentication.”

• Tom certifications referenced Report an error

  “reviews and obtains the third party’s independent assurance reports or certificates where such is relevant and available (e.g. ISO 27001, ISO 27701 or SOC 2 Type II report)”

• Liability cap Report an error

  “the total liability of the PROCESSOR under this Agreement shall be limited to the cause of damage and to the amount that equals the total amount of fees paid by the CONTROLLER to the PROCESSOR for the delivery and performance of the Services for a period not more than twelve months immediately prior to the cause of damages”

• Jurisdiction ghent Report an error

  “To refer the dispute to mediation by an independent person; To refer the dispute to the courts in Ghent, Belgium”

• Amendment terms Report an error

  “Amendments will be effective thirty (30) days following their publication through a written notification. Following this period, the CUSTOMER will be considered to have tacitly accepted the changes.”

• Record of processing Report an error

  “the PROCESSOR shall make the record available upon first request of the CONTROLLER, an auditor appointed by the CONTROLLER and/or the Supervisory Authority”

• GDPR rights assistance Report an error

  “the PROCESSOR assists the CONTROLLER by appropriate technical and organisational measures, insofar as this is possible, for the fulfilment of the CONTROLLER’s obligation to respond to requests for exercising the Data Subject’s rights laid down in Chapter III of the Regulation.”

• Block destruction capability Report an error

  “The PROCESSOR shall ensure that both it and its Subprocessor(s) have the technical and organisational capabilities required to block access to Personal Data and to physically destroy data with no means of recuperation if and when such request is made by the CONTROLLER”

• Third party transfer prohibition Report an error

  “The transfer of Personal Data to Third Parties in any manner possible is prohibited, unless it is legally required or in case the PROCESSOR has obtained the explicit consent of the CONTROLLER to do so.”

• International transfer general rule Report an error

  “Personal Data can only be transferred to and/or kept with the recipient outside the European Economic Area (EEA) in a country that not falls under an adequacy decision issued by the European Commission by exception and only if necessary to comply with the obligations of this Agreement”

Scores citing this record

• The Academic Researcher Consent, GDPR & respondent data
• The Academic Researcher European sovereignty
• The Data Protection Officer Consent, GDPR & respondent data
• The Data Protection Officer European sovereignty
• The HR Lead Consent, GDPR & respondent data
• The HR Lead European sovereignty
• The Market Researcher Consent, GDPR & respondent data
• The Market Researcher European sovereignty
• The Operations Manager Consent, GDPR & respondent data
• The Operations Manager European sovereignty
• The Skeptic Consent, GDPR & respondent data
• The Skeptic European sovereignty