Name: Guance GDPR and Data Privacy Statement
Availability: InStock

How has Guance prepared for GDPR?

As a data processor, Guance has strengthened its policies and procedures to better align with GDPR requirements:

Data security agreement: Guance enters into a data security agreement with users. The agreement defines the responsibilities and obligations of Guance and its users, including data protection measures and data transfers. https://docs.guance.com/en/agreements/confidentiality/
Data access control: Guance provides authentication and authorization mechanisms to ensure that only authorized personnel can access users’ personal data.
Data security and protection measures: Guance implements technical and organizational measures to protect users’ personal data, including encryption, access control, security audits and monitoring.
Data retention periods: Guance has established a data retention policy that specifies how long user data is retained. Data is kept only for as long as necessary for its intended purpose.
Data protection impact assessments (DPIA): Guance conducts data protection impact assessments for processing activities that may pose a high risk to data subjects’ rights and freedoms. These assessments help identify potential risks and establish appropriate measures to mitigate and manage them.

What security measures does Guance use to protect user data?

Guance helps users protect their data under GDPR in the following ways:

Records of processing activities: Guance maintains the processing records required by GDPR. These records cover processing activities, data transfers and security measures to help users meet their GDPR record-keeping obligations.
Support for data subject rights: Guance helps users handle data subject requests, including rights of access, rectification and erasure. We provide appropriate tools and procedures so users can respond effectively.
Assistance with regulatory requests: As a data processor, Guance helps users communicate with regulators so that compliance matters relating to investigations and inquiries into processing activities are properly addressed. We provide necessary information and documents and support users in responding to regulatory requests.

To provide our services, Guance may engage third-party organizations, referred to as subprocessors, to carry out processing activities that involve access to user data.
The following table lists these subprocessors, their locations and the types of services they provide to Guance:

Guance has defined procedures for responding to data subject requests, including obtaining consent through privacy@guance.com.