Dropsuite GDPR Statement

It is helpful to know where your customers are geographically located: The GDPR applies to EU citizens and transactions that occur within EU member states. Therefore, to ensure that you are compliant with these regulations, you must be able to determine where your customers are located.

• Ensure that appropriate consent is obtained: The GDPR favors the use of opt-in consent mechanisms (explicit consent) e.g. unselected checkbox over opt-out consent mechanisms (implied consent) e.g pre-selected checkbox. Additionally, data subjects (your customers) should be able to withdraw their consent as easily as it was given and have their personal data erased.
• Develop data breach response plans when personal data is involved: Organizations should have a clear, defined plan if personal data is breached. The GDPR requires that notice must be provided without undue delay and, where feasible, not later than 72 hours after having become aware of it. Dropsuite will notify affected customers without undue delay if we become aware of a data breach of our services.
• The GDPR requires that all personal data of EU entities are keep within the EU. Dropsuite by default, ensures that all data of its End Users is processed in a data centre located in the European Union.

Prepare for demonstration of compliance. GDPR requires that processors make available all information necessary to the controller to demonstrate compliance. Dropsuite shall upon request of the Partner provide to the Partner information necessary to demonstrate compliance with the obligations laid down in Article 28 of the GDPR and allow for, and contribute to, audits, including inspections, conducted by the Controller or another auditor mandated by the Controller.