Data processing agreement (dpa) — found from the homepage — Gatekeeper

Cited by

Facts read from this source

• DPA governing law Report an error

  “Subject to any provision of the SCCs to the contrary, this DPA shall be governed by the laws of England and Wales. The courts of England shall have exclusive jurisdiction for the settlement of all disputes arising under this DPA.”

• ISO 27001 certified Report an error

  “Gatekeeper is ISO 27001 certified and will continue to maintain these certifications for the term of the Agreement.”

• External audit frequency Report an error

  “Gatekeeper obtains an external security and compliance audit once per calendar year.”

• Audit report available Report an error

  “At Your written request, Gatekeeper will provide You with the Report so that You can reasonably verify Gatekeeper’s compliance with its obligations under this DPA.”

• Breach notification hours Report an error

  “Gatekeeper shall notify You without undue delay after becoming aware of (and in any event within 72 hours of discovering) any breach of security leading to the accidental or unlawful destruction, loss, alteration or unauthorised disclosure or access to any Personal Data (“Personal Data Breach”).”

• Scc modules Report an error

  “Module Two (Controller to Processor) shall apply where You are a controller of Personal Data and Gatekeeper is processing Personal Data;”

• Scc governing law Report an error

  “In Clause 17 of the EU SCCs, Option 1 applies and the EU SCCs shall be governed by Irish law;”

• Deletion days Report an error

  “Gatekeeper shall in any event delete all copies of Personal Data in its systems within 60 days of the effective date of termination of the Agreement”

• Subprocessor change notice days Report an error

  “During the term of this DPA, Gatekeeper shall provide You with 30 days prior notification, via email, of any changes to the list of Sub-Processors before authorising any new or replacement Sub-Processor to process Personal Data in connection with the provision of the Services.”

• Export tools Report an error

  “The Services have built-in tools that allows You to export and permanently erase data.”

• Entities Report an error

  “Gatekeeper Ltd, Les Niemes, La Grande Route De St. Pierre, St. Peter, Jersey, JE3 7AX; or Gatekeeper UK Group Ltd, 2 Printer's Yard, 90a The Broadway, London, England, SW19 1RD; or Gatekeeper US LLC, 1209 Orange Street, Wilmington, Delaware, 19801; or Gatekeeper Canada Inc. 5300 Commerce Court West, 199 Bay Street, Toronto, Ontario M5L 1B9.”

• Encryption Report an error

  “Your archived data is encrypted at rest using AES256 bit encryption and data in transit is protected by Transport Layer Security (“TLS”).”

• Supervisory authorities Report an error

  “Where the EU GDPR applies, the Irish Data Protection Authority - Data Protection Commission, (DPC). Where the UK GDPR applies, the UK Information Commissioner's Office, (ICO). Where the FADP applies, the Swiss Federal Data Protection and Information Commissioner, (FDPIC).”

• No data sale Report an error

  “Gatekeeper may not: (i) sell Personal Data; (ii) retain, use, or disclose Personal Data for commercial purposes other than providing the Services under the terms of the Agreement; or (iii) retain, use, or disclose Personal Data outside of the terms of the Agreement.”

• US state laws covered Report an error

  “California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), and Utah Consumer Privacy Act (UCPA) and the Connecticut Data Privacy Act (CTDPA), Montana Consumer Data Privacy Act (MCDPA)”

• Dta available Report an error

  “A DTA has been completed for all Sub-Processors, who make Restricted Transfers of Data in reliance upon SCCs and is available upon request.”

• Data centre certifications Report an error

  “Gatekeeper utilises third party data centres that maintain current ISO 27001 certifications. Gatekeeper will not utilise third party data centres that do not maintain the aforementioned certifications and/or attestations, or other substantially similar or equivalent certifications and/or attestations.”

• No sensitive data Report an error

  “No sensitive data will be processed or transferred and shall not be contained in the content of or attachments to, emails.”

• UK EU representative Report an error

  “Any UK or EU representative named in Your privacy policy.”

• Jersey law reference Report an error

  “the Data Protection (Jersey) Law 2018”

8 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Data Protection Officer Integrations, signature & exit
• The Data Protection Officer European sovereignty
• The General Counsel European sovereignty
• The IT Integrator Integrations, signature & exit
• The IT Integrator European sovereignty
• The Procurement Analyst European sovereignty
• The Sales Ops Owner European sovereignty
• The Skeptic European sovereignty