Categories of data
Aggregated workplace measurement, survey responses at team level, and account data for platform users. Individual behavioural records are not in the list because they are not created.
Ainda não disponível neste idiomaEstá a ler a versão inglesa enquanto a tradução é revista.
Legal
Data processing agreement
Most processing agreements are written to permit the widest set of activities a vendor might ever want. This one is written to describe what the product does, which is a narrower document, and a more useful one in a works council meeting.
What it covers
Purpose limitation
Processing is limited to the study or the service the customer commissioned, stated before collection begins.
Sub-processors
Named, with EU hosting, and changes notified in advance.
Retention and deletion
Set per study, with deletion on termination and a stated backup window.
Security measures
The controls audited under ISO 27001 certificate 0202968.
Audit and assistance
Assistance with data subject requests, and the audit rights required under Article 28.
Getting a copy
The current DPA, the ISO certificate and the sub-processor list are available on request and are usually the first three documents procurement asks for.