Data processing agreement (dpa) — RingCentral RingEX

Cited by

Facts read from this source

• DPA last updated Report an error

  “Customer DPA Last Updated: October 1, 2024”

• DPA roles Report an error

  “Customer shall be the Controller of the Customer Personal Data processed by RingCentral under the Agreement as a Processor.”

• Audit reports Report an error

  “RingCentral will select an independent, qualified third-party auditor to conduct, at RingCentral’s expense, at least annual audits of the security of the Services and environments, in accordance with internationally recognized standards such as ISO27001, the SOC 2, Type II standards or its equivalent.”

• Security incident notification Report an error

  “Upon becoming aware of a Security Incident, RingCentral shall notify Customer without undue delay at the contact information that Customer has provided in the Administrative Portal”

• Deletion or return Report an error

  “Upon termination or expiry of the Agreement, RingCentral shall delete Customer Personal Data (including copies) in RingCentral's possession or, at Customer’s request, provide options to return the Personal Data to the customer, save to the extent that RingCentral is required by applicable law to retain some or all of the Customer Personal Data.”

• List URL Report an error

  “The Subprocessors engaged by RingCentral in respect of each of the Services at the time of the Agreement are noted on the RingCentral Subprocessor list available at https://www.ringcentral.com/legal/dpa-subprocessor-list.html”

• Objection period Report an error

  “If the Customer objects to the appointment of an additional Subprocessor within thirty (30) calendar days of such notice on reasonable grounds relating to the protection of the Customer Personal Data, then the Parties will discuss such concerns with a view to achieving resolution.”

• Dpf certification Report an error

  “RingCentral complies with and has certified to the U.S. Department of Commerce its adherence to the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF).”

• Scc transfers Report an error

  “RingCentral will put in place such measures as are necessary to ensure the transfer is in compliance with Applicable Data Protection Laws, which include the execution of the applicable EU Commission's Standard Contractual Clauses, and the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or the putting in place of any other valid transfer mechanism.”

• Government disclosure notice Report an error

  “RingCentral will notify and provide the Customer with the details of the data disclosure request prior to disclosing any Personal Data, unless legally prohibited or where an imminent risk of serious harm exists that prohibits prior notification.”

• Dpia assistance Report an error

  “RingCentral shall, to the extent required by the GDPR, and upon Customer's request and at Customer’s expense, provide Customer with reasonable assistance with data protection impact assessments or prior consultations with data protection authorities”

• Services covered Report an error

  “1. Cloud-based communications and collaboration services for high-definition voice, video, SMS, chat messaging and collaboration, conferencing, online meetings, and fax; 2. Customer contact center services and an omni-channel customer communication management platform that unifies all customer-facing communication channels, including voice, email, SMS, website, mobile app, chat and social media communications, onto a single platform, enabling community responses to customer service inquiries; 3. Virtual events and presentation services; 4. Professional services;”

• AI features Report an error

  “Services may include dashboards providing various metrics and insights on customers’ communications, some of which are based on a conversation intelligence platform involving artificial intelligence.”

• Data categories Report an error

  “User generated content which may comprise any of the following: participants’ names or phone numbers; chat messages; text of inbound and outbound faxes; voicemails; text of inbound and outbound SMS; meetings notes; audio/video streams in transit; meeting or call recordings;”

• Special categories Report an error

  “The Services are not designed to recognize and/or classify data as special categories of data or sensitive data (as defined in the GDPR or in other Applicable Data Protection Laws), nor as Personal Data concerning children or minors, or related to criminal convictions and offenses.”

• GDPR definition scope Report an error

  “"GDPR" means (i) the Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, (ii) any Applicable Data Protection Laws implemented by European Union member states, (iii) the UK Data Protection Act (DPA 2018), as amended, and the GDPR as incorporated into UK law as the UK GDPR, and (iv) the Swiss Federal Acts on Data Protection (the “FADP”); all as amended from time to time.”

• Annexes Report an error

  “- Annex 1 - Description of the Processing - (If applicable) Annex 2 - RingCentral Customer United States Privacy Addendum”

• Cpra no sell share Report an error

  “Not Sell or Share Customer Personal Information.”

• Ferpa school official Report an error

  “if Customer is an educational agency or institution subject to the Family Educational Rights and Privacy Act, 20 U.S.C. § 1232g (FERPA), RingCentral shall operate as a school official with legitimate educational interests in obtaining or accessing Personally Identifiable Information, including Education Records pertaining to students”

• Privacy contact Report an error

  “Contact information for privacy inquiries: privacy@RingCentral.com.”

• Data subject rights assistance Report an error

  “Some of the RingCentral Services may provide direct technical means to enable Customer to fulfil its duties to respond to requests from data subjects under Applicable Data Protection Laws. If Customer is unable to address the data subject's request through such technical means, or where such functionality is not available, RingCentral shall, taking into account the nature of the processing, provide reasonable assistance to Customer”

• Governing law Report an error

  “The governing law and forum that apply to the Agreement also apply to this DPA.”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.

Scores citing this record

• The Contact Centre Lead Reliability, call security & telecoms compliance
• The Contact Centre Lead European sovereignty
• The Data Protection Officer European sovereignty
• The IT Administrator European sovereignty
• The Office Manager European sovereignty
• The Inside Sales Lead Reliability, call security & telecoms compliance
• The Inside Sales Lead European sovereignty
• The Skeptic European sovereignty