Bamboohr Data Processing Agreement

When using this general data and information, PVcase does not draw any conclusions about the data subject. Rather, this information is necessary to (1) properly provide the content of our website, (2) optimize the content of our website and advertising for it, (3) ensure the long-term functionality of our IT systems and website technology, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyberattack. Therefore, PVcase statistically analyzes the data and information collected anonymously, with the aim of increasing the protection and security of our company`s data and ensuring an optimal level of protection of the personal data we process. Anonymized data from server log files is stored separately from all personal data provided by a data subject. PVcase`s data protection declaration is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). Our privacy policy must be legible and understandable to the public as well as to our customers and business partners. To do this, we would first like to explain the terminology used. This Ceipal Data Processing Agreement and its annexes („DPA“) reflect the parties` agreement with respect to the processing of personal data by us on your behalf in connection with the CEIPAL Subscription Services in accordance with the CEIPAL Customer Terms of Use between you and us (also referred to as the „Agreement“ in this DPA). On the PVcase website, users have the opportunity to subscribe to our company`s newsletter. The personal data transmitted to the controller when ordering the newsletter are determined by the input mask used for this purpose.

Online replicas and backups: Whenever possible, production databases are designed to replicate data between at least 1 primary database and 1 secondary database. All databases are backed up and maintained using at least industry standard methods. The data subject has the possibility to object to Google`s interest-based advertising. Therefore, the data subject must access the link www.google.de/settings/ads from each of the browsers used and make the desired settings. BambooHR uses a technology called „cookies“ to store session information. A cookie is a small amount of data that often contains an anonymous unique identifier that is sent to your browser by a website`s computers and stored on your computer`s hard drive. We use both session identification cookies and persistent cookies. A „session identification cookie“ expires when you close your browser. We use session identification cookies to track your login status. This cookie is only transmitted via HTTPS. A „persistent cookie“ remains on your hard drive for a longer period of time. We use persistent cookies to determine where you were directed to our website from, as well as the last user id you used to log in.

BambooHR may place and access BambooHR cookies on your computer; Cookies are necessary to use bambooHR services®. You can delete persistent cookies by following the instructions in the „Help“ directory of your Internet browser. Click here for more information about cookies, including the option to disable them. If you disable cookies, you can continue to use our website, but your ability to use certain areas of our website, such as contests or surveys, is limited. Each data subject shall have the right granted by the European legislator to object, on grounds relating to his or her particular situation, at any time to the processing of personal data concerning him or her, which is based on Article 6(1)(e) or (f) of the GDPR. This also applies to profiling based on these provisions. Becoming GDPR compliant if you have never processed data securely in the past or collected it with your consent may require serious effort. Even if you`ve been responsible for your data, it can be tedious to find all the areas where you need to add warnings and clearly get consent. These notifications are only part of GDPR consent compliance, making a once-invisible practice visible to consumers. However, in order to comply with the regulations, you must obtain the consumer`s consent in any situation in which you collect information, whether in person or online, in one form or another submission by the public. This includes data that you collect or have collected for research, marketing, sale of goods and services, or at any other time. You must disclose how you intend to use the data in plain language, and the best way to do so is to use a disclaimer in the same place as the form to be completed.

We collect and process your personal data on the basis of your consent and/or for our legitimate interest. The PVcase website contains information that allows quick electronic contact with our company, as well as direct communication with us, which also includes a general address of the so-called e-mail (e-mail address). If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject will be automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the controller will be stored for the purposes of processing or contacting the data subject. This personal data will not be passed on to third parties. Data protection is a particularly high priority for the management of the PVcase. The use of PVcase`s Internet pages is possible without any indication of personal data; However, if a data subject wishes to use special corporate services through our website, the processing of personal data may become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject. If the decision (1) is necessary for the conclusion or performance of a contract between the data subject and a controller, or (2) if it is based on the explicit consent of the data subject, PVcase shall implement appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject, at least the right to obtain human intervention from the controller, to express its position and to challenge the decision.

If the data subject wishes to exercise the rights relating to automated individual decision-making, he or she may, at any time, contact any employee of the controller. (e) promptly and correctly process all requests from the data exporter in connection with the processing of the personal data being transferred and follow the advice of the supervisory authority in the processing of the transmitted data; Bamboo HR LLC and BambooHR Payroll LLC (collectively, „BambooHR“) are committed to protecting the privacy of individuals who visit our website („Visitors“) and individuals who register to use the BambooHR Services® on behalf of BambooHR`s customers („Users“) (collectively, „you“ or „your“). This Privacy Policy applies to information provided on or through the BambooHR® website under www.bamboohr.com, the BambooHR® web application owned and operated by BambooHR, and the content and services offered by BambooHR through the website and applications (collectively, the „Services“) and describes BambooHR`s privacy practices in relation to the BambooHR Services. It also describes the choices available to you regarding the use of your personal information (defined below) and how you can access and update that information. The use of information collected through the BambooHR® Services is limited to the purpose of providing the Services for which the User or Customer has engaged BambooHR and as otherwise described in this Privacy Policy. Certain information provided to us may individually identify a visitor, user or employee of a customer, alone or in conjunction with other information to which we have access, and such information may be referred to in this Privacy Policy as „Personal Visitor Information“, „User Personal Information“ or „Data“ (collectively, „Personal Data“). (i) the processing services are performed by the sub-processor in accordance with clause 11; As indicated above, the data subject can prevent the installation of cookies by our website at any time by means of a corresponding setting of the web browser used and thus permanently oppose the installation of cookies. .

. .