Service Data is any information, including personal data, which is stored in or transmitted via the Affinitext services by, or on behalf of, our customers and their end-users.
[Last updated 1 May 2024]
Affinitext prioritizes customer trust. We know that customer and user data is important to our customers’ values and operations. That is why we keep it private and safe.
Affinitext supports over 30,000 users in over 120 countries and territories. Our customers entrust us with sensitive information, stemming from a wide range of industries including healthcare, financial services, government, and technology.
Affinitext helps customers and users maintain control of their privacy and data security in a myriad of ways:
Since our inception, Affinitext’s approach has been anchored with a strong commitment to privacy, security, compliance and transparency. This approach includes supporting our customers’ compliance with EU data protection requirements, including those set out in the General Data Protection Regulation (‘GDPR’), which became enforceable on May 25, 2018.
If a company collects, transmits, hosts or analyses personal data of EU data subjects, GDPR requires the company to use third-party data processors who guarantee their ability to implement the technical and organizational requirements of the GDPR. To further earn our customers’ trust, our licence terms and conditions have been updated to provide our customers with contractual commitments regarding our compliance with applicable EU data protection law and to implement additional contractual provisions required by the GDPR. Our contractual commitments guarantee that customers can:
Affinitext encourages customers to prepare for the GDPR enforcement by reviewing their privacy and data security processes and policies to ensure compliance. Customers, as controllers, bear the primary responsibility for ensuring that their processing of personal data is compliant with EU data protection law. Below are some key points to consider for GDPR compliance:
- Geographical Application: The GDPR may apply to organizations that are established in the EU as well as certain organizations established outside the EU but which are processing the personal data of EU data subjects, depending on their activities. The GDPR applies to Affinitext.
- Rights of End-Users: Organizations should be cognizant of End-Users whose personal data they may be processing. The GDPR establishes enhanced rights for End-Users, and organizations should be able to accommodate those rights.
- Data Breach Notifications: Organizations that are controllers of personal data should have clear processes in place in order to comply with the GDPR requirement to report data breaches in accordance with the time frames set out within the GDPR. Affinitext, as processor, will notify affected customers promptly if we become aware of a data breach of our services.
- Appointment of Data Protection Officer (‘DPO’): Customers may need to appoint DPOs to manage issues relating to the processing of personal data.
