Is the NetSenX data processing agreement public, and what does it commit to?
Yes, it is published on the website, so you can read it before you sign up. It forms part of the NetSenX terms of service between TriStiX S.L. as processor and your organisation as controller, and it lists the sub-processors with their role and location. Among its commitments: NetSenX notifies you of a personal data breach within 24 hours of becoming aware of it; changes to the sub-processor list are announced at least 14 days in advance, so you can object; you have audit rights on notice; and when you close your account, personal data is deleted immediately and backup copies expire within 14 days, after you have had the chance to export it. It also states that personal data is stored in the EEA and that some sub-processors are established outside it, with the transfer safeguards used. The DPA is governed by Spanish law, and the supervisory authority it names is the Spanish AEPD. Have your DPODPO: data protection officer. The person responsible for data protection in a company under the GDPR. compare it with your own requirements; Enterprise customers can request a signed copy.
General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.
Read next
Related questions
- Where does NetSenX store data about our employees’ devices, and for how long?
- Do we need a data protection impact assessment before deploying network monitoring?
- Is a smaller European security vendor a business continuity risk?
- What is the US CLOUD Act, and does it affect data stored in the EU?
- How does NetSenX handle GDPR, and where is my data stored?
Terms used here
- DPO (data protection officer)
- The person responsible for data protection in a company under the GDPR.