From 39c7f1becbb5df5a3e22a25dfe320ce296fc0816 Mon Sep 17 00:00:00 2001 From: Giampaolo Mancini Date: Fri, 29 Mar 2019 14:46:50 +0100 Subject: [PATCH] Add Citrix et a. * Citrix * Disqus * Heroku * Intercom * Microsoft * Mixpanel * OneAll * Podio * Scaleway * SparkPost * SurveyMonkey * TypeForm * Zapier --- README.md | 16 ++++++++++++++-- 1 file changed, 14 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 24669bd..532d32b 100755 --- a/README.md +++ b/README.md @@ -20,8 +20,10 @@ Please [send in pull requests](https://github.com/tollwerk/data-processing-agree | Atlassian Cloud | ✅ | [English website](https://www.atlassian.com/licensing/purchase-licensing#privacy&gdpr-9) | DPA available on request for Atlassian Cloud customers | | Automattic | ✅ | [English Support Article](https://automattic.com/automattic-and-the-general-data-protection-regulation-gdpr/), DPA on individual request for paid plans of WordPress.com, Jetpack, WooCommerce.com, Akismet, PollDaddy | | | billbee | ⌛ | [German blog post](https://www.billbee.io/blog/billbee/dsgvo-gdpr-adv-co-die-naechsten-schritte/) about their future plans regarding their GDPR implementation. | | +| Citrix | ✅ | [Citrix Data Processing Agreement](https://www.citrix.com/buy/licensing/citrix-data-processing-agreement.html) | | | Cloudflare | ✅ | [English DPA](https://www.cloudflare.com/media/pdf/cloudflare-customer-dpa-20180402.pdf) (PDF) | | | DigitalOcean | ✅ | [English DPA](https://www.digitalocean.com/security/gdpr/data-processing-agreement/)
[Detailed information about data security](https://www.digitalocean.com/security/) | | +| Disqus | ✅ | [Data Processing Agreement for Publishers](https://help.disqus.com/terms-and-policies/data-processing-agreement-for-publishers) | | | DomainFactory | ✅ | [German DPA](https://www.df.eu/fileadmin/media/doc/ADV_Kunden_Domainfactory.pdf) (PDF)
German blog posts [1](https://www.df.eu/blog/auf-dem-weg-zur-dsgvo/), [2](https://www.df.eu/blog/der-8-schritte-plan-wie-sie-die-neue-dsgvo-umsetzen/) | | | Dropbox | 🔍 | [English DPA for Business Accounts](https://assets.dropbox.com/documents/en/legal/data-processing-agreement-dfb-013118.pdf) (PDF) | Only Business accounts are supported; Standard, Plus and Professional accounts do not have the ability to sign a DPA. | | etracker | ✅ | [German DPA](https://www.etracker.com/av-vertrag/) | The DPA can be concluded online under account settings | @@ -32,10 +34,12 @@ Please [send in pull requests](https://github.com/tollwerk/data-processing-agree | Gmail (via G Suite) | ✅ | [G Suite Administrator Help](https://support.google.com/a/answer/2888485) (multiple languages) | | | Google Analytics | ✅ | [DPA instructions](https://support.google.com/analytics/answer/3379636) | | | Google Maps API | ✅ | [Controller-Controller Data Protection Terms](https://privacy.google.com/intl/de/businesses/mapscontrollerterms/) | Joint Control Contract (JCC, Art. 26) | +| Heroku | ✅ | [Heroku and GPDR](https://devcenter.heroku.com/articles/gdpr) | | | Hetzner | ✅ | [English news article](https://www.hetzner.com/news/vertrag-zur-auftragsverarbeitung-gemaess-art-28-ds-gvo-steht-ab-sofort-online-zur-verfuegung-eintrag/?country=gb)
[German news article](https://www.hetzner.de/news/vertrag-zur-auftragsverarbeitung-gemaess-art-28-ds-gvo-steht-ab-sofort-online-zur-verfuegung-eintrag/?country=de) | | | Host Europe | ✅ | [German DPA](https://www.hosteurope.de/download/ADV_TOM_Host_Europe_GmbH_V3_0.pdf) | | | Hotjar | ✅ | [English DPA](https://www.hotjar.com/legal/support/dpa) | | | Hubspot | ✅ | [English DPA](https://legal.hubspot.com/dpa) | | +| Intercom | ✅ | [How Intercom complies with GDPR](https://www.intercom.com/help/pricing-privacy-and-terms/data-protection/how-intercom-complies-with-gdpr) Help Center Article | | | Issuu | ⌛ | — | *"we are working on becoming GDPR compliant"* and we *"will update them as soon as we have all of our changes and new policies in place"* | | KeyCDN | ⌛ | [General Information](https://www.keycdn.com/gdpr)
[English Tweet](https://twitter.com/KeyCDN/status/987291292563656705) stating they will provide a DPA which will be available in May | *"Our privacy team is continually reviewing our features and practices to ensure we support our customers with their GDPR compliance requirements."* | | LinkedIn | ✅ | [English DPA](https://legal.linkedin.com/dpa)
[French DPA](https://legal.linkedin.com/dpa/FR)
[German DPA](https://legal.linkedin.com/dpa/DE)
[Spanish DPA](https://legal.linkedin.com/dpa/ES)
[Portuguese DPA](https://legal.linkedin.com/dpa/PG) | Privacy Shield; DPA incorporated into the "LinkedIn Contract" | @@ -47,30 +51,38 @@ Please [send in pull requests](https://github.com/tollwerk/data-processing-agree | MaxCDN | ✅ | [English website](https://www.maxcdn.com/gdpr/) | | | MaxCluster | ✅ | Download via Customer Backend | | | micropayment | ✅ | [Online Form](https://www.micropayment.de/data/contract/commissioneddataprocessing/?reset=1) for registered / logged-in users | | +| Microsoft | ✅ | [Licensing Terms and Documentation](http://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=46) | DPA available in Microsoft Online Service Terms documents in Addendum 4 section | | Mittwald | ✅ | [Comment in German blog post](https://www.mittwald.de/blog/allgemein/dsgvo-webseiten), available from customer service | | +| Mixpanel | ✅ | [Data Processing Addendum](https://mixpanel.com/legal/dpa/) | | | Mouseflow | ✅ | [Contact form](https://www.mouseflow.com/gdpr/) | | | Netcup | ✅ | [German Wiki](https://www.netcup-wiki.de/wiki/Zusatzvereinbarung_zur_Auftragsverarbeitung) | | | Netlify | ⌛ | [English Tweet](https://twitter.com/Chr_Bach/status/986641168686505984), stating they will post a DPA very soon. | Privacy Shield | | Newsletter2Go | ✅ | [German Website](https://www.newsletter2go.de/datenschutz-uebersicht/) | | +| OneAll | ✅ | [GDPR/Data Processing Agreement](https://www.oneall.com/company/gdpr-data-processing-agreement/) | | +| Podio | ✅ | [Where is data hosted](https://help.podio.com/hc/en-us/articles/360000980392-Where-is-data-hosted-) FAQ article | Part of Citrix | | Postmark | ✅ | [English Website](https://postmarkapp.com/eu-privacy), DPA available online | [Privacy Shield](https://postmarkapp.com/eu-privacy#privacy-shield)
*"We reviewed our data processing activities, and are making any changes that are needed in advance of the GDPR effective date."* | | Salesforce | ✅ | [English Website](https://www.salesforce.com/content/dam/web/en_us/www/documents/data-processing-addendum.pdf), [English DPA](https://www.salesforce.com/content/dam/web/en_us/www/documents/data-processing-addendum.pdf) (PDF) | Privacy Shield | +| Scaleway | ✅ | [Privacy Policy](https://www.scaleway.com/terms/privacy/) | | | Scopevisio | ✅ | [German DPA](https://www.scopevisio.com/wp-content/uploads/docs/Muster-Auftragsdatenverarbeitung_Scopevisio_nach_Art_28_DS-GVO.pdf) | | | Simplecast | ✅ | [Data Processing Addendum](https://simplecast.com/dpa) | DPA – Including EU Standard Contractual Clauses) | | Slack | ✅ | [Data Processing Addendum](https://a.slack-edge.com/6a098/marketing/downloads/legal/slack-data-processing-addendum.pdf) | [Privacy Shield](https://www.privacyshield.gov/participant?id=a2zt0000000GnMBAA0&status=Active) | +| SparkPost | ✅ | [Data Protection Addendum](https://www.sparkpost.com/policies/dpa/) | | | Strato | ✅ | [German Website](https://www.strato.de/faq/article/2763/Fragen-zur-Auftragsdatenverarbeitung-ADV-und-der-neuen-EU-Datenschutzgrundverordnung-DSGVO.html) || | Stripe | ✅ | [Data Processing Addendum](https://stripe.com/dpa/legal) (you need to be logged into your account to accept it)
[English Privacy Shield Policy](https://stripe.com/privacy-shield-policy)
[Stripe Services Agreement](https://stripe.com/legal) (multilingual) | [Privacy Shield](https://www.privacyshield.gov/participant?id=a2zt0000000TQOUAA4&status=Active) | +| SurveyMonkey | ✅ | [DPA](https://help.surveymonkey.com/articles/en_US/kb/SurveyMonkey-Data-Transfers-and-EU-Laws#DPA)
[SurveyMonkey and GDPR](https://www.surveymonkey.com/mp/gdpr/) | | | TinyLetter | ✅ | [English Online Form](https://mailchimp.com/legal/forms/data-processing-agreement/) | Privacy Shield; part of Mailchimp | | Toggl | ⌛ | — | Promises to be *"fully be GDPR compliant by the May deadline"*, but *"doesn't feel that a DPA is needed at this time"*. At the moment it's unclear how this solution will look like and whether it's going to be truly GDPR compliant. | | Trello | ⌛ | English [forum entry](https://community.atlassian.com/t5/Trello-questions/GDPR-Storing-data-on-Trello/qaq-p/701775) stating that there will be a DPA until May 2018
[Trello and GDPR](https://help.trello.com/article/1118-trello-and-gdpr-our-commitment-to-data-privacy) (multiple languages)
[Revised Privacy Policy](https://trello.com/privacy-updated) (multiple languages; effective as of May 25th, 2018)
[Trust @ Trello](https://trello.com/trust) | Privacy Shield; part of Atlassian | | Twilio | 🔍 | [Online Form](https://ahoy.twilio.com/gdpr) ([Preview](https://s3.amazonaws.com/ahoy-assets.twilio.com/docs/Twilio_GDPR_DPA_for_ToS.pdf)) (English) | Privacy Shield | +| TypeForm | ✅ | [GDPR Compliance Help Article](https://www.typeform.com/help/gdpr-compliance/) | "*You can request a DPA using the Contact Support button at the bottom of this page. We’ll then send you everything you need*" | | TypeKit | 🔍 | [Online Form](https://www.adobe.com/de/privacy/eu-dpa.html) (English) | Part of Adobe | | Travis CI | ✅ | [English DPA](https://docs.travis-ci.com/legal/data-processing-agreement/) | | -| Uberspace | ✅ | [German DPA](https://uberspace.de/dpa), can be signed via the dashboard | | +| Uberspace | ✅ | [German DPA](https://uberspace.de/dpa), can be signed via the dashboard | | | Webgo | ✅ | [Online Form](https://login.webgo.de/dsgvo) | | | WebhostOne | ✅ | [German FAQ](https://www.webhostone.de/faq-vertragliches/kann-ich-mit-webhostone-einen-adv-vertrag-abschliessen.html) | | | Wordpress.com | ✅ | [English Support Article](https://automattic.com/automattic-and-the-general-data-protection-regulation-gdpr/), DPA available on request for paid plans | Run by Automattic | | WPengine | ⌛ | [English DPA](https://wpengine.com.au/legal/dpa/) | | -| Zapier | ⌛ | [English support article](https://zapier.com/help/data-privacy/#gdpr)
[GDPR Compliance Updates](https://zapier.com/help/gdpr/) | "*We at Zapier wholeheartedly support the privacy rights of our customers and our users and are proactively working toward GDPR compliance by May 25th, 2018.*" | +| Zapier | ✅ | [English support article](https://zapier.com/help/data-privacy/#gdpr)
[GDPR Compliance Updates](https://zapier.com/help/gdpr/)
[Data Processing Addendum](https://zapier.com/help/dpa/) | "**Update for May 25th, 2018:** We've completed the bulk of our compliance work, though we'll continue to make improvements. You can read about [your and our role in compliance, as well as a little background on our GDPR journey here!](https://zapier.com/blog/updates/1584/gdpr-zapier)", | | Zendesk | ⌛ | [English FAQ support article](https://www.zendesk.com/company/customers-partners/eu-data-protection/) | *"Zendesk will be compliant with the GDPR when it becomes enforceable in May 2018.*" |