At zenvoy.com, nothing to us is more important than the success of our customers and the protection of their personal data. With customers in nearly every country in the world, we adhere to the General Data Protection Regulation (GDPR). The GDPR expands the privacy rights granted to European individuals and requires certain companies that process the personal data of European individuals to comply with a new set of regulations. In particular, the GDPR may apply to companies that process the personal data of European individuals and have a presence in the EU (e.g. offices or establishments) and to companies that do not have any presence in the EU but target the European market (e.g. by offering goods or services to the European market) or monitor the behavior of European individuals. We’re here to help our customers in their efforts to comply with the GDPR.
In 2016, the European Union (EU) approved a new privacy regulation called the General Data Protection Regulation commonly known as the GDPR. It’s a mandatory ruling that applies to all companies that collect the data and information of EU individuals and meet certain territorial requirements. The GDPR is designed to strengthen the security and protection of personal data in the EU, as well as provide businesses with a structured framework on how to collect, process, use, and share personal data. Under the GDPR, the concept of “personal data” is very broad, and covers almost any information relating to a specific individual.
All companies collecting or processing the personal data of EU individuals must be GDPR compliant by May 25, 2018.
The GDPR defines and distingue between two types of parties and responsibilities when it comes to collecting and processing personal data: data controllers and data processors. A data controller determines the purposes and ways that personal data is processed, while a data processor is a party that process data on behalf of the controller. That means that the controller could be any company or organization. A processor could be a SaaS, IT or other company that is actually processing the data on behalf of the controller, zenvoy.com is a Data Processor, zenvoy.com customers (the organizations who use zenvoy.com) are Data Controllers. The controller is responsible to make sure that all processors with whom it deals will be GDPR compliant and the processors themselves must keep records of their processing activities.
We welcome the arrival of GDPR and view the regulations as raising the bar for data protection, security, and compliance. We will continue to be committed to our customers and users to help them comply with the GDPR while using zenvoy.com as their data processor.
We worked with our engineering, product, security and legal teams to make both our product and our legal terms in line with the GPDR and will continue to ensure they keep in line continuously. As part of zenvoy.com GDPR readiness project we’ve taken the following steps:
We’ll continue to monitor the guidance around GDPR compliance and will ensure that our product and processes are complying with those guidance when they become effective.
Nothing in the GDPR prevents businesses from storing data outside of the EU, provided that the data processors adhere to the necessary regulations and protections. At zenvoy.com, we store our data with Amazon Web Service (AWS), which is based in the US. Like zenvoy.com, AWS has announced that it is GDPR ready.
Additional information is available on the official GDPR website of the European Union.
If you have any additional questions about the GDPR you are welcome to contact us at email@example.com, +1 (888) 936-8696
Zenvoy recognizes and will comply with GDPR and those rights, except as limited by applicable law. The rights under GDPR include:
Right of Access. This includes your right to access the personal information we gather about you, and your right to obtain information about the sharing, storage, security and processing of that information.
Right to Correction. This is your right to request correction of your personal information.
Right to Erasure. This is your right to request, subject to certain limitations under applicable law, that your personal information be erased from our possession (also known as the “Right to be forgotten”). However, if applicable law requires us to comply with your request to delete your information, fulfillment of your request may prevent you from using Zenvoy’s services and may result in the closing of your account.
Right to Complain. You have the right to make a complaint regarding our handling of your personal information with the appropriate supervisory authority.
Right to Restrict Processing. This is your right to request restriction of how and why your personal information is used or processed.
Right to Object. This is your right, in certain situations, to object to how or why your personal information is processed.
Right to Portability. This is your right to receive the personal information we have about you and the right to transmit it to another party.
Right to not be subject to Automated Decision-Making. This is your right to object and prevent any decision that could have a legal, or similarly significant, effect on you from being made solely based on automated processes. This right is limited, however, if the decision is necessary for performance of any contract between you and us, is allowed by applicable European law, or is based on your explicit consent. Many of these rights can be exercised by signing in and directly updating your account information. If you have questions about exercising these rights or need assistance, please contact us at firstname.lastname@example.org.
Processors we use. Zenvoy uses external processors, all of which are GDPR compliant. The full list of external processors we use is available to any entity that provide a lawful request to email@example.com.
Law enforcement. We will not hand your data over to law enforcement unless a court order says we have to.
Security & Encryption. All data is encrypted via SSL/TLS when transmitted from our servers to your browser. The database backups are also encrypted. Data isn’t encrypted while it’s live in our database (since it needs to be ready to send to you when you need it).
Deleted data. When you cancel your account, we’ll ensure that nothing is stored on our servers past 30 days. Anything you delete on your account while it’s active will also be purged within 30 days.
Location of Site and Data. This Site is operated in the United States and the data is stored in the United States. If you are located in the European Union or elsewhere outside of the United States, please be aware that any information you provide to us will be transferred to the United States. By using our Site, participating in any of our services and/or providing us with your information, you consent to this transfer.
Data we process. When you sign up we ask for your: (*) Required information
We collect this data so we can:
Note that with the exception of the public profile photo, all information is retained within the walled-garden community.
Cookies. Zenvoy uses session cookies to track your sessions. It is not possible to use Zenvoy without this session cookie so by subscribing you agree to us setting this cookie. Zenvoy is a free to use (unless clearly stated when you onboard for some communities) and we cover most of our expenses by advertising. These advertisers may set cookies to track your preferences.
GDPR statement v1.9 February 21 2019 prepared by Nick Brandt, DPO Zenvoy, LLC