Data processing agreement (dpa) — Envoy Workplace

Cited by

Facts read from this source

• DPA effective date Report an error

  “Effective Date: August 2, 2022”

• DPA legal entity Report an error

  “Envoy, Inc. (“Vendor” or “Envoy”)”

• DPA address Report an error

  “Envoy, Inc.410 Townsend St, Suite 410 San Francisco, CA 94107 United States”

• DPA scc module two Report an error

  “the parties agree to comply with the general clauses and with “Module Two” (Transfer Controller to Processor) of the EU Standard Contractual Clauses, which are incorporated herein by reference”

• DPA scc governing law Report an error

  “for the purpose of Clause 17, the EU Standard Contractual Clauses shall be governed by the laws of Ireland”

• DPA scc jurisdiction Report an error

  “for the purpose of Clause 18(b), the parties agree to submit to the jurisdiction of the courts of Ireland”

• DPA UK addendum Report an error

  “the UK International Data Transfer Addendum to the EU Standard Contractual Clauses (version B.1.0) issued by the UK Information Commissioner (“UK Addendum”) will be deemed entered into (and incorporated into this Addendum by this reference)”

• DPA swiss fadp Report an error

  “Insofar as the transfer of Company Personal Data is subject to the Swiss Federal Act on Data Protection, the parties agree to comply with the EU Standard Contractual Clauses”

• List URL Report an error

  “A list of Subprocessors and the nature of the Processing activities can be found at: https://envoy.com/legal/subprocessors.”

• Change notice days Report an error

  “Vendor will inform Company of any intended changes concerning the addition or replacement of any appointed Subprocessors (a “New Sub-Processor”) at least fifteen (15) days in advance”

• Breach notification Report an error

  “Vendor shall notify Company without undue delay upon Vendor or any Subprocessor becoming aware of a Personal Data Breach affecting Company Personal Data”

• Deletion period days Report an error

  “Vendor and each Vendor Affiliate shall promptly and in any event within thirty (30) days of the date of cessation of any Services involving the Processing of Company Personal Data (the “Cessation Date”), delete and procure the deletion of all copies of those Company Personal Data”

• Dpi assistance Report an error

  “Vendor and each Vendor Affiliate shall provide reasonable assistance to each Company Group Member with any data protection impact assessments, and prior consultations with Supervisory Authorities”

• Data subject rights assistance Report an error

  “Vendor and each Vendor Affiliate shall assist each Company Group Member by implementing appropriate technical and organizational measures, insofar as this is possible, for the fulfilment of the Company Group Members' obligations, as reasonably understood by Company, to respond to requests to exercise Data Subject rights”

• Protect health data Report an error

  “For certain Services (Envoy Protect), Company Personal Data processed by Vendor includes health related information, such as information on symptoms and possible exposure to COVID-19 or a similar/related public health emergency”

• Personal data types Report an error

  “including name, contact information (including, but not limited to: phone, email address) and visitor information (including timestamp of visit)”

• Data subject categories Report an error

  “Company’s employees and visitors.”

• Security measures URL Report an error

  “data importer has implemented and will maintain appropriate technical and organizational measures to protect the security, confidentiality and integrity of Company Personal Data as described here https://envoy.com/security-de/legal/security-and-privacytails/#data-security”

• Certification page URL Report an error

  “Please also refer to Vendor’s compliance certification page at https://envoy.com/legal/compliance.”

• DPA subprocessor liability Report an error

  “Where any of its Subprocessors fails to fulfil its data protection obligations, Vendor will be liable to the Company for the performance of its Subprocessors’ obligations.”

• DPA applies to Report an error

  “forms part of the Enterprise SaaS Agreement or the Terms of Service (“Principal Agreement”)”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.

Scores citing this record

• The Microsoft 365 Administrator European sovereignty
• The Office Manager European sovereignty
• The People Lead European sovereignty
• The Skeptic Occupancy analytics & employee privacy
• The Skeptic European sovereignty
• The Workplace Manager European sovereignty
• The Works Council Member European sovereignty