Our software stores personal data on our infrastructure on behalf of our clients, so we are a Processor. We use Zendesk, a ticketing system, where users can report issues. This system is hosted in the US. In this system we will have email addresses from users, mostly only from our contact persons at clients. So not from all users. Should we regard Zendesk as a Sub-Processor with respect to personal data?
Assign topic to the user
Expert
Andrei Hanganu
Mar 26, 2018
Answer:
You are correct, if Zendesk would be hosting the data of your customers they should be considered your sub-processors based on the description you provided.
To learn more about processors and sub-processors see this free online training GDPR Foundations Course: https://advisera.com/training/eu-gdpr-foundations-course//
Comment as guest or Sign in
Mar 26, 2018
Mar 26, 2018
Mar 26, 2018