Flocktory cares strongly for data protection and we have updated our Data Protection and Data Processing Policy to the newest requirements of the European GDPR.
Besides updating our Data Protection Appendix (Appendix II) to our General Terms & Conditions we would like to inform you about the measures we take to protect your data, how and where we handle your data and how you can contact us if you have questions about your data.
Client’s Role in GDPR Compliance
As a Flocktory client, you are a Data Controller and Flocktory is acting as your Data Processor for your users’ data. From May 25th, 2018 we strongly recommend to ensure the following:
What data we collect and for what purpose
Flocktory collects and processes data of website visitors and their usage of the website with the purpose of:
Data that Flocktory collects may include:
Under no circumstances Flocktory will collect or process special categories of personal data as described in Art. 9 GDPR.
Where and for how long do we store your data
Flocktory stores and processes all collected data in AWS Cloud on servers inside the European Union (server locations Ireland & Germany).
Some of our services might require the transfer of personal data to third parties. If the third party is located outside of the European Union then Flocktory assures that security measures and contractual agreements accepted by the EU and the privacy-shield framework exist to protect your data according to the required standards.
Flocktory will keep your data up to 5 years after your last interaction with us or the client that we are processing data for unless otherwise agreed by our data processing agreements.
Who is responsible for the data processing
FLOCKTORY SPAIN S.L.
Plaza De Carlos Trías Bertrán, 4, 28020 – Madrid
Data Protection Officer: Kilian Byszio
In order to securely store and process the data collected by Flocktory uses a range of state of the art security measures to protect access to our servers and the data. These measures include among others:
We regularly review our security measures, the type and purpose of stored data and will review and amend measures and rectify or delete data to comply with applicable legislation.
Your rights as individual subject to data processing
Flocktory fully supports the rights established by the new legislation to increase control over data collection and processing. If your data is being processed by us then you have the following rights:
You can find more information about your rights in GDPR Chapter 3.
To exercise your rights it is sufficient to send your request to firstname.lastname@example.org and we will comply with your request.
Flocktory is working with sub-processors for providing parts of our services. All suppliers have compliant data processing and data protection policies and are recognised as fulfilling the GDPR requirements of the European Union. Flocktory ensures that only a set of minimum required information is passed to the sub-processors to fulfil the desired task.