As part of our commitment to data privacy and compliance, RSVPify offers a Data Protection Addendum (DPA) that automatically applies to all business and organizational customers with operations in the European Economic Area (EEA) or the United Kingdom (UK). This DPA serves as an integral part of our services for eligible customers, ensuring that their data processing activities align with the requirements of the General Data Protection Regulation (GDPR) and other relevant data protection laws in the EEA and UK.
The RSVPify Data Protection Addendum includes provisions that address data protection responsibilities, data processing instructions, security measures, and data breach notification requirements, among other essential aspects. By incorporating this DPA, we aim to provide our EEA and UK-based customers with the necessary tools and framework to maintain compliance with applicable data protection regulations while utilizing our event planning and management platform.
At RSVPify, we recognize the significance of safeguarding personal data and facilitating secure data processing for our customers. By offering this automatically applicable Data Protection Addendum, we strive to enhance transparency, trust, and peace of mind for our valued business customers in the EEA and UK regions.
What is a Data Protection Addendum?
A DPA, or data processing addendum, is a contract between a data controller (an organization that collects and processes personal data; you, the "Customer") and a data processor (an organization that processes personal data on behalf of the data controller; "RSVPify") that sets out the terms and conditions of the data processing. RSVPify's DPA complies with the requirements of applicable data protection laws, such as the General Data Protection Regulation (GDPR).
RSVPify's DPA works hand-in-hand with its US-EU Privacy Shield certification to further detail and govern how RSVPify processes and protects personal data for Customers in the EEA or UK.
What does RSVPify's DPA cover?
The names and contact information of the data controller and the data processor.
The purpose of the data processing.
The type of personal data that will be processed.
The duration of the data processing.
The security measures that will be taken to protect the personal data.
The rights of the data subjects.
The responsibilities of the data controller and the data processor.
The dispute resolution process.