Data Processing Agreement

A data processing agreement is a legally binding contract that states the rights and obligations of Visum (acting as a data processor) and your company (acting as a data controller) concerning personal data protection.

It completes Visum Privacy Policy and applies to personal data processing activities subject to GDPR. Following GDPR Article 28, Section 3, our data processing agreement includes assurances that:

Visum agrees to process personal data only on written instructions of your company.
Everyone who comes into contact with data at Visum is sworn to confidentiality.
Visum uses appropriate technical and organizational measures to protect the data's security.
Visum will not subcontract to another processor (apart from the one already specified on our website) unless instructed to do so in writing by your company. In this case, Visum must sign another DPA with the sub-processor (according to Sections 2 and 4 of Article 28).
Visum will help your company uphold its obligations under the GDPR, particularly concerning data subjects' rights.
Visum will help your company maintain GDPR compliance with Article 32. (security of processing) and Article 36 (consulting with the data protection authority before undertaking high-risk processing).

Subprocessors

List of Data Subprocessors To support our Services, Visum may engage and use data processors with access to certain Customer Data (each, a " Subprocessor"). This page provides essential information about the identity, location, and role of each Subprocessor. Visum currently uses third-party Subprocessors to provide infrastructure services and to help us provide customer support and email notifications. Before engaging any third-party Subprocessor, Visum performs diligence to evaluate their privacy, security, and confidentiality practices and executes an agreement implementing its applicable obligations.

Entity Name	Subprocessing Activities	Entity Country
Clever cloud	Cloud Service Provider	France (storage location: Paris, France)
Google Inc.	Email Provider	United States

Other Subprocessors

Visum may use the following Subprocessors to perform other Service functions:

Entity Name	Subprocessing Activities	Entity Country
Crisp	Cloud-based Customer Support Services	France
Slack Technologies, Inc.	Cloud-based Collaboration Services	United States
Notion	Cloud-based Project Management Services	United States
Stripe, Inc.	Cloud-based Payments Processor	United States
Sendinblue	Cloud-based Email Service Provider	France
Zcal	Cloud-based Meeting Scheduling Service	United States
Google meet (Google Inc.)	Cloud-based Video Conferencing Service	United States
Hubspot	Cloud-based User Surveys & Onboarding help	United States
Logrocket	Cloud-based User Analytics Service	United States

Updates

As our business grows and evolves, the Subprocessors we engage may also change. We will endeavor to provide the owner of Customer's account with notice of any new Subprocessors to the extent required under the Agreement, along with posting such updates here. Please check back frequently for updates.