Terms and DPA page — Netigate

Cited by

Facts read from this source

• Tos DPA combined Report an error

  “The Netigate Terms of Service (“ToS”) and the integrated Data Processing Agreement (“DPA”) govern the relationship between Netigate and our Customers regarding the services we provide and protection of personal data according to the GDPR.”

• Dach separate terms Report an error

  “For Customers of Netigate Deutschland GmbH separate Terms of Service apply (DACH, Deutsch).”

• Subprocessor list Report an error

  “Netigate Sub-processors View here”

• Toms published Report an error

  “Technical and Organisational Measures View here”

• Head office Report an error

  “Netigate AB Drottninggatan 25 111 51 Stockholm Sweden”

• Org number Report an error

  “Org.nr: 556576-0997”

• Group entities Report an error

  “Sweden Netigate AB SEBOLREG.5565760997 Germany Netigate Deutschland GmbH DEM1906.HRB23843 Norway Netigate Norge AS NOFOR.995053861 Finland Lumoame Oy FIFPRO.2791797-8 The Netherlands Mopinion BV NLNHR.24459623”

• ISO 27001 certified Report an error

  “Netigate is certified under ISO/IEC 27001:2022 – the world’s best-known standard for information security management and privacy systems.”

• Subprocessor ISO requirement Report an error

  “Netigate also requires that any sub-processors it hires to process Netigate’s data, customer data or survey data are also at least ISO 27001 certified.”

• Security team Report an error

  “Netigate has a Security & Privacy team made up of the following roles: CISO, CTO, Head of IT, Head of Legal, Head of HR, DPO and the lead SRE.”

• Encryption in transit Report an error

  “Data in-transit (i.e. during transport) is encrypted with TLS using signed and trusted certificates (ISRG Root X1 CA) stored i Azure Key Vault (using Azure-managed keys) – Standard Tier (FIPS 140-2 Level 1).”

• Encryption at rest Report an error

  “Data-at-rest is disk-level encrypted using Azure’s server-side encryption (SSE) with platform managed keys (PMK), which is Azure’s default encryption currently, with Azure-managed keys (symmetric AES 256), stored in Microsoft’s own Key Store.”

• SSO SAML Report an error

  “We support Single-Sign On (SSO) per the SAML 2.0 standard, where requested.”

• Penetration testing Report an error

  “We perform penetration tests on both an application and infrastructure level are performed both internally and externally by independent third-party experts on a regular basis.”

• EU only data centers Report an error

  “Instead, we use the leading data center providers at EU-only locations and who are all thoroughly vetted by us and who are at least ISO 27001 certified”

• Germany hosting option Report an error

  “For qualifying customers, we offer an alternative data storage solution solely hosted within Germany.”

• DPA customers Report an error

  “Netigate always has a data processing agreement in place with customers (who are considered “data controllers”) as well as with any suppliers who process personal data.”

• Third country transfers Report an error

  “We do not normally transfer data to third countries.”

• Transfer impact assessments Report an error

  “Where necessary we perform transfer impact assessments with our external GDPR counsel to document the likelihood of such transfers.”

• GDPR art32 toms Report an error

  “We have in place appropriate technical and organization measures (called “TOMs”) to follow the GDPR requirements regarding confidentiality, integrity, availability and resilience in accordance according to Art. 32 GDPR.”

• Privacy by design Report an error

  “We operate by the principle of privacy by design and default in the entire lifecycle of our products and services.”

• No automated decision making Report an error

  “As a responsible company we refrain from automatic decision-making or profiling.”

• Data subject rights Report an error

  “Right to confirmation and right to information – we will gladly confirm to you whether we process personal data about you, what data it is and for what purpose it will be processed.”

• Backup practices Report an error

  “All data is currently backed up and stored in multiple locations.”

• Disaster recovery Report an error

  “As is required by our ISO certificate, we have business continuity plan and a disaster recovery plan in place, regularly reviewed and audited.”

• Deployment frequency Report an error

  “Changes and updates to the Netigate platform are usually implemented several times per day. There is also a scheduled service window monthly.”

• Anonymization feature Report an error

  “This means at minimum: access control and regular access review, anonymization functionality within the Netigate platform, data encryption during transfer and at-rest, regular backups and regular security testing.”

• Supplier code of conduct Report an error

  “Download Netigate Supplier Code of Conduct (Global, English) (PDF)”

• Piwik pro analytics Report an error

  “This website uses the web analytics tool Piwik PRO.”

• Hubspot dpf Report an error

  “HubSpot is certified under the US-EU data protection agreement “Data Privacy Framework” and thereby commits to comply with EU data protection regulations. Furthermore, we have concluded a data processing agreement with HubSpot.”

• Teamtailor recruitment Report an error

  “If you would like to apply for a position via our website, this is done via the service provider “Teamtailor.com”.”

Scores citing this record

• The Academic Researcher Consent, GDPR & respondent data
• The Academic Researcher Hosting choice, teams & portability
• The Academic Researcher European sovereignty
• The Data Protection Officer Consent, GDPR & respondent data
• The Data Protection Officer Hosting choice, teams & portability
• The Data Protection Officer European sovereignty
• The HR Lead Consent, GDPR & respondent data
• The HR Lead Hosting choice, teams & portability
• The HR Lead European sovereignty
• The HR Lead Pricing transparency
• The Market Researcher Consent, GDPR & respondent data
• The Market Researcher Hosting choice, teams & portability
• The Market Researcher European sovereignty
• The Operations Manager Consent, GDPR & respondent data
• The Operations Manager Hosting choice, teams & portability
• The Operations Manager European sovereignty
• The Skeptic Consent, GDPR & respondent data
• The Skeptic Hosting choice, teams & portability
• The Skeptic European sovereignty