In short: when your organisation uploads recordings about other people, we process them on your behalf. Our data processing agreement (DPA) sets out how. Email us and we’ll send it to you to sign.
Who needs a DPA
You probably need one if your organisation is subject to the GDPR, the UK GDPR, or a similar law, and you upload recordings that contain other people’s personal information, such as interviews, meetings or research sessions.
Under the DPA, your organisation is the controller: it decides what is recorded and why. Amity Results Inc. is the processor: we handle the recordings only to provide Amity Results to you.
What it covers
- Your instructions. We process your data only to provide the service and as you instruct us.
- Confidentiality. Everyone at Amity Results who can reach your data is bound to keep it confidential.
- Security. The measures on our security page.
- Subprocessors. The companies on our subprocessors page, with 30 days’ notice and a chance to object before we add one.
- Helping you. We help you answer requests from the people in your recordings, such as a request to see or delete their data.
- Breaches. We tell you without undue delay, and within 48 hours (lawyer), after we become aware of a breach affecting your data.
- Deletion. When you leave, we delete your data, or give it back first if you ask.
- Audits. We give you the information you need to show you’re compliant, and answer reasonable security questionnaires.
- Transfers. The Standard Contractual Clauses and the UK International Data Transfer Addendum for data that leaves the European Economic Area or the United Kingdom.
How to sign it
Email privacy@amityresults.com with:
- your organisation’s legal name and address;
- the name and email of the person who will sign.
We’ll send the DPA for electronic signature, usually within two business days. A signed copy is kept with your account.
A ready-to-sign PDF will be available to download here soon.
Questions
If your organisation has its own DPA or security questionnaire, send it to privacy@amityresults.com and we’ll review it.