GDPR

Last Updated: September 1, 2024

What Is The GDPR?

The General Data Protection Regulation (GDPR) is a European privacy law that went into effect on May 25, 2018. The GDPR replaces the EU Data Protection Directive and applies a single data protection law throughout the EU. We have taken steps to ensure that we are compliant with the GDPR as of Dec 12, 2022.

Who Does the GDPR Apply To?

The GDPR applies to all entities and individuals based in the EU and to entities and individuals that process the personal data of EU individuals. The GDPR defines personal data broadly as any information relating to an identified or identifiable natural person.

What Is DeepSales' Role Under GDPR?

We act as both a data processor and a data controller under the GDPR.

DeepSales as a data processor:

When customers use our products and services to process EU personal data, we act as a data processor. This includes EU personal data uploaded to DeepSales through API or third parties.

DeepSales as a data controller:

We act as a data controller for the EU customer information we collect to provide our products and services, including customer name and contact information.

What Personal Data Do We Collect?

We store data that customers have given us voluntarily. As a data controller, we may collect and store contact information such as name, email address, phone number, or physical address when customers sign up for our products and services.

What Is the DeepSales Data Processing Agreement (DPA)?

Our DPA outlines the privacy and security protections we have in place. It is available to all our customers and can be provided on request.

Request DPA at: help@deepsales.com

International Data Transfers

Our infrastructure resides in Europe and all processing is done in Europe. Some of our API servers are located outside Europe, but we provide a level of privacy protection that complies with EU rules.

How Do We Handle Delete Requests?

Customers have the ability to remove or delete information they have uploaded to our products. Customers may also deactivate their accounts and request that all personal data we have collected and stored is deleted.