Records & DPIA depth — found from sitemap — CookieFirst

Cited by

Facts read from this source

• Processor entity Report an error

  “Digital Data Solutions BV, statutory located at Plantage Middenlaan 42A in Amsterdam and registered at the Chamber of Commerce with number 75762277”

• Governing law Report an error

  “Dutch legislation applies to this Data Processing Agreement. The competent court in Amsterdam has jurisdiction to take note of any disputes arising out of or related to this Data Processing Agreement.”

• Audit right Report an error

  “The Controller has the right to have an audit carried out at no later than once a year, with a notice of two weeks, within regular office hours, at his own expense, by independent experts”

• Subprocessor objection period Report an error

  “The Controller shall be given 21 days to object, duly motivated and in writing, after receiving such notification.”

• Subprocessor list appendix Report an error

  “In Appendix 2 an overview of all currently appointed Sub-Processors is included. In addition, the Controller may at any time request an up-to-date overview of all appointed Sub-Processors.”

• Data location Report an error

  “Consent Data is stored on servers in datacenters of OVH in Frankfurt Germany.”

• Eea processing Report an error

  “In principle, the Processor only processes the Personal Data of Data Subjects within the confines of the European Economic Area and the countries that have been designated by the European Commission as countries offering an adequate level of protection.”

• Transfer mechanism Report an error

  “the Processor shall, unless agreed otherwise, rely on EU approved standard contractual clauses and/or approved Binding Corporate Rules for the transfer of Personal Data.”

• Datacenter certifications Report an error

  “The datacenters of OVH have the following certifications: Datacenter SOC 1 Type II SOC 2 Type II ISO/IEC 27001 PCI-DSS LIM3 yes yes yes yes RBX8 yes yes Yes Yes”

• Encryption at rest Report an error

  “Databases are encrypted with LUKS at rest.”

• MFA vpn Report an error

  “All privileged access to production systems should use Multi-Factor Authentication (MFA) if possible and over a secure VPN connection.”

• Consent data collected Report an error

  “By clicking on our cookie banner the following information will be shared with CookieFirst: The website visitor consent status or the withdrawal of consent The website visitor anonymized IP address Information about the website visitor Browser type Information about the website visitor Device type Information about the website visitor Operating system The date and time the website visitor has visited our website The country and region of the visitor”

• Ip anonymization Report an error

  “Anonymizing IP addresses by removing the last octet of the address and replacing it with “0”.”

• Geo templating Report an error

  “Saving this data is needed to be able to show the banner in EU countries only and for CCPA-compliance by using GEO-templating”

• Retention Report an error

  “The Personal Data is stored until the request for removal, delete your CookieFirst cookies or until the purpose of the archived Personal Data no longer exists.”

• Deletion on termination Report an error

  “Upon termination of this Data Processing Agreement, the Processor will, at the request of the Controller, make the Personal Data available to the Controller or to a Third Party appointed by the Controller. The Controller must submit this request to the Processor within four weeks. After termination of this Data Processing Agreement and after the requested transfer of Personal Data, the Processor will destroy the remaining Personal Data.”

• Incident notification Report an error

  “The Processor informs the Controller without undue delay if a Security Incident occurs regarding the processing of the Personal Data, where the Personal Data is lost and/or has and/or could become available to unauthorized parties.”

• Dpia cooperation Report an error

  “In addition, the Processor will reasonably cooperate in carrying out risk assessments, analysing the cause of the incident or breach, identifying required corrective measures and implementing those measures.”

• Data subject requests Report an error

  “If the Processor receives a request or complaint from a Data Subject, such as the ones from Art. 12 to 22 GDPR (request for access, rectification, erasure of Personal Data), then the Processor will forward that request timely to the Controller.”

• Security measures appendix Report an error

  “The Processor shall implement the security measures as listed in Appendix 3, in addition to the minimal appropriate technical and organizational security measures as defined by the competent Data Protection Authority.”

• Backups Report an error

  “We make daily snapshots of the databases with Point in Time recovery”

• App server protections Report an error

  “Malware scanner Web Application Firewall with Machine Learning Rulesets Automated Intrusion Detection and Protection Proactive Defense DDOS protection”

• Access restriction Report an error

  “All access to databases containing consent Data and client Data is restricted based on IP addresses, secure VPN connections and SSL access.”

• Environment segregation Report an error

  “Development and staging environments shall be strictly segregated from production SaaS environments to reduce the risks of unauthorized access or changes to the operational environment.”

• Liability cap Report an error

  “The amount of the compensation to be paid by the Party will never be higher than the amount paid by the Controller to the Processor for the provision of services over the period of one year.”

• Termination Report an error

  “This Data Processing Agreement comes into effect on the date of signature. This Data Processing Agreement may be terminated by the end of each month.”

• Service description Report an error

  “CookieFirst by Digital Data Solutions BV offers compliance solutions for websites concerning the use of cookies. CookieFirst's software identifies cookies on a website of the Controller and helps website owners to execute cookies only if the correct permission or consent is given.”

3 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Drafted Generalist Records & DPIA depth
• The Drafted Generalist Data subject rights & incidents
• The Drafted Generalist Privacy regime coverage
• The Drafted Generalist European sovereignty
• The External DPO Records & DPIA depth
• The External DPO Data subject rights & incidents
• The External DPO Privacy regime coverage
• The External DPO European sovereignty
• The In-House Counsel Records & DPIA depth
• The In-House Counsel Data subject rights & incidents
• The In-House Counsel Privacy regime coverage
• The In-House Counsel European sovereignty
• The IT Integrator Data subject rights & incidents
• The IT Integrator Privacy regime coverage
• The IT Integrator European sovereignty
• The Lead Auditor Records & DPIA depth
• The Lead Auditor Data subject rights & incidents
• The Lead Auditor Privacy regime coverage
• The Lead Auditor European sovereignty
• The Skeptic Records & DPIA depth
• The Skeptic Data subject rights & incidents
• The Skeptic Privacy regime coverage
• The Skeptic European sovereignty