This article explains where PerformNoti’s data is stored and how our processing complies with GDPR. It also explains our compliance with GDPR’s International Data Transfer clause.
- The legitimacy of our data processing operations
- Do we do the international transfer of personal data?
- Which Data Transfer mechanisms does PerformNoti rely on? Standard Clauses or Privacy Shield?
LEGITIMACY OF OUR DATA PROCESSING OPERATIONS
DATA STORAGE
In Firebase, the Google cloud-hosted database, we store and process your user and usage data (refer to the article: What data is held by PerformNoti & how is it used?).
Google manages Firebase (refer to Firebase’s privacy policy for more information).
The physical storage of PerformNoti data and processing is protected under the Data Processing and Security Terms of the Google Cloud Platform.
DATA PROCESSING
PerformNoti is GDPR compliant as we do not transfer any personal data. We never save the content or data of your google form or the documents generated from your google form submission in our database.
If an approval workflow is set up, we will store the specific configuration data and the generated file information in Google Firebase. This data is essential for PerformNoti’s web app to trigger emailnotificationsn and updation of the approval information in the Form responses spreadsheet whenever there is an approval action on the document flow.
DO WE DO INTERNATIONALTRANSFERSR OF PERSONAL DATA?
We will never transfer, sell, make copies, or share your data stored by PerformNoti with third-party services or companies.
WHICH DATA TRANSFER MECHANISMS DOES PerformNoti RELY ON? STANDARD CLAUSES OR PRIVACY SHIELD?
Upon completion of the DPA, it is stipulated that: The application of legal data transfer mechanisms for our customers who wish to transfer personal data to a third country (outside the EEA) by Article 45 or 46 of the GDP relies on entering into Standard Contractual Clauses or offer any alternative transfer solution if requested (for example, the EU-U.S. Privacy Shield).