Projection Genie’s Commitment to GDPR Compliance
Projection Genie is committed to compliance with the European Union’s General Data Protection Regulation (GDPR). Although the law governs our relationship with only our European clients, our response to it includes policies effective for all users of our services and visitors to our site. Projection Genie has made the GDPR a priority, and we are and have always been fully aligned with the regulation’s intended result: the protection of your privacy and personal data.
What Projection Genie is doing to ensure compliance
Projection Genie has dedicated significant internal and consulting resources to reviewing our existing processes, agreements with third-party vendors, and IT security policies for the GDPR. Below are examples of company-wide initiatives Projection Genie has undertaken in order to abide by the regulation:
- When processing personal data, we will follow the security and privacy measures required under GDPR.
- In the event of a personal data breach, we will promptly notify regulators as well as our customers and end users
- Projection Genie staff who access and process personal data have been trained in handling data and maintaining the confidentiality and security of that data.
- Only essential staff access and process customer data, and only when necessary to provide services.
- We will hold our vendors who handle personal data to the same data management, security, and privacy practices to which we hold ourselves.
- We will periodically review and update our processes and security policies as required by the GDPR.
GDPR Q&A
Does Projection Genie process customer personal data?
Yes. Projection Genie processes customer personal data only as needed to provide products, services, and customer support as identified in our Privacy Policy.
Projection Genie does not collect personally identifiable information for marketing purposes without customers’ consent, and customers may revoke consent at any time. (Projection Genie’s marketing includes a drip email campaign and an email newsletter.) Furthermore, Projection Genie has never sold PII to third parties and is committed to continuing this as a core business practice.
What data does Projection Genie process?
Projection Genie uses data that is found in a typical email signature: name, email address, mailing address, and phone number. Projection Genie also stores avatars for customers who choose to include them in their accounts. IP addresses may also be gathered in server logs but are not matched to other PII.
Where does Projection Genie process and store data?
Projection Genie stores customer data on DigitalOcean servers located exclusively in the US. Our third-party data center meets security regulations and standards with industry-leading physical and environmental controls. Our applications benefit from a data center and network architecture built to meet the requirements of the most security-sensitive organizations.
While Projection Genie itself is based in the United States, we work with a small number of authorized contractors located outside the U.S. to support the development and operation of our services. Access to customer data is strictly limited to what is necessary to perform their work, and all contractors are bound by confidentiality obligations and security requirements consistent with applicable data protection laws.
You can sign-up to receive communication if Projection Genie adds or removes Subprocessors. To opt-in to receive such notifications, email us at info@projectiongenie.com.
More Resources
- Privacy Policy: https://www.projectiongenie.com/privacy-policy
- Customer Agreement: https://www.projectiongenie.com/customer-agreement
- GDPR Resources: http://ec.europa.eu/justice/data-protection/reform/index_en.htm
