Stroofy will Process Customer Personal Information in accordance with the instructions from the Controller (Customer), please see data addendum:
Categories of Customer Personal Information collected
|
Details of categories of Customer Personal Information collected
|
Categories of Data Subjects for which Customer Personal Information is Processed
|
Purposes for which Stroofy Processes Customer Personal Information
|
Nature of Processing
|
Duration of Processing and Retention
|
Subprocessor or international organisation that personal data is transferred to
|
Safeguards or Certifications
|
User Credentials
|
User credentials permit the Users to access the Stroofy Services and includes emails and password hashes.
|
Account administrators that manage the account and engagement survey responses provided by employee's to improve their organisation.
Employees that use the coaching tool to improve their day and answer the surveys to improve their organisation.
|
Provide, maintain and improve Stroofy's offering.
Prevent or address service, security, support or technical issues with the product or Services.
|
Handling, storing, sharing with Subprocessors, accessing and reviewing Customer Personal Information for the Processing purposes set out adjacent.
|
As long as necessary for the purposes described in this Data Processing Addendum, unless a longer retention is required by law.
Unless required by law, personal data will be deleted when a Customer or, where appropriate, a User, deletes their account.
|
Amazon Web Services Inc
Digital Ocean LLC
|
Privacy Shield Certified
|
|
Employee Profile
|
The account administrator has the ability to create a profile for each of his employees in the web application for the purposes of improving aggregated insights. This page contains optional information such as first name, last name, job title, gender and department. The only required information is the email address of the employee.
|
Employees answering the surveys, which may include account administrators.
|
Provide, maintain and improve Stroofy's offering.
Prevent or address service, security, support or technical issues with the product or Services.
|
Handling, storing, sharing with Subprocessors, accessing and reviewing Customer Personal Information for the Processing purposes set out adjacent.
|
As long as necessary for the purposes described in this Data Processing Addendum, unless a longer retention is required by law.
Unless required by law, personal data will be deleted when a Customer deletes their account.
|
Amazon Web Services Inc
Digital Ocean LLC
|
Privacy Shield Certified
|
|
Answers to Employee Surveys
|
Answers to surveys can reveal a wide range of Personal information.
Employees answer surveys such as “You feel motivated by your organisations values” and “I feel happy when I'm at work”
Stroofy’s internal database includes the identity of the Survey Respondents but is never shared with the account administrator.
|
Employees answering the surveys, which may include account administrators.
|
Provide, maintain and improve Stroofy's offering.
Prevent or address service, security, support or technical issues with the product or Services.
Create statistics based on the aggregated Personal Information for benchmarking purposes.
|
Handling, storing, sharing with Subprocessors, accessing and reviewing Customer Personal Information for the Processing purposes set out adjacent.
|
As long as necessary for the purposes described in this Data Processing Addendum, unless a longer retention is required by law.
Unless required by law, personal data will be deleted when a Customer deletes their account.
|
Amazon Web Services Inc
Digital Ocean LLC
|
Privacy Shield Certified
|
|
User Attributes
|
The account administrator can input his or her own categories of User attributes under certain profile headings (e.g. first name, last name, title, department, gender) and inputs the User attributes relating to the categories in each of the employee profiles. The Personal Information collected according to those User attributes will therefore vary accordingly.
Stroofy does not have control over the categories of user attributes inputted by the account administrator.
|
Employees answering the surveys, which may include account administrators.
|
Provide, maintain and improve Stroofy's offering.
Prevent or address service, security, support or technical issues with the product or Services.
|
Handling, storing, sharing with Subprocessors, accessing and reviewing Customer Personal Information for the Processing purposes set out adjacent.
|
As long as necessary for the purposes described in this Data Processing Addendum, unless a longer retention is required by law.
Unless required by law, personal data will be deleted when a Customer deletes their account.
|
Amazon Web Services Inc
Digital Ocean LLC
|
Privacy Shield Certified
|
|
Session Logs
|
Stroofy records information about the following for the purpose of its focus algorithms: active process name, active window title, URL if active on browser, start time of use, end time of use and; for distinguishing users and devices: company UUID, hash sum over user name, machine hardware UUID, device operating system version and I.P. address
|
Employees that use the coaching tool to improve their day, which may include account administrators.
The information adjacent is only shared with the account administrator in aggregated and anonymised format for the purposes of the wellbeing and insights dashboard. Minimum thresholds of aggregation are applied to prevent any individual user being identified.
|
Provide, maintain and improve Stroofy's offering.
Prevent or address service, security, support or technical issues with the product or Services.
|
Handling, storing, sharing with Subprocessors, accessing and reviewing Customer Personal Information for the Processing purposes set out adjacent.
|
As long as necessary for the purposes described in this Data Processing Addendum, unless a longer retention is required by law.
Unless required by law, personal data will be deleted when a Customer deletes their account.
|
Amazon Web Services Inc
Digital Ocean LLC
|
Privacy Shield Certified
|
|
User Profile on Coaching Tool
|
User's have the option to add their first name and last name via the mobile application. A users email address is required in order to match the Services to a Customer.
|
Employees that use the coaching tool to improve their day which may include account administrators.
|
Provide, maintain and improve Stroofy's offering.
Prevent or address service, security, support or technical issues with the product or Services.
|
Handling, storing, sharing with Subprocessors, accessing and reviewing Customer Personal Information for the Processing purposes set out adjacent.
|
As long as necessary for the purposes described in this Data Processing Addendum, unless a longer retention is required by law.
Unless required by law, personal data will be deleted when a Customer or, where appropriate, a User, deletes their account.
|
Amazon Web Services Inc
Digital Ocean LLC
|
Privacy Shield Certified
|
|
Customer Account Administrators
|
Customer when contacting Stroofy via telephone, email or its website will often provide us with their first name, last name, email address, company name and phone number for the purpose of interacting with our sales and support team, and making payment for the Services when appropriate.
Account Administrator responsible for payment processes on behalf of the Customer.
|
Customer representatives and Account administrators that manage the account with Stroofy.
|
Provide, maintain and improve Stroofy's offering.
Prevent or address service, security, support or technical issues with the product or Services.
|
Handling, storing, sharing with Subprocessors, accessing and reviewing Customer Personal Information for the Processing purposes set out adjacent.
|
As long as necessary for the purposes described in this Data Processing Addendum, unless a longer retention is required by law.
|
Alphabet Inc
Amazon Web Services
Digital Ocean LLC
Hubspot Inc
Stripe Inc
|
Privacy Shield Certified
|