Purpose/Activity
Type of data
Lawful basis for processing including basis of legitimate interest
To register you as a new user
(a)Identity
(b) Contact
(a) Performance of a contract with you
(b) Necessary for our legitimate interests (to deliver the contract we have signed with your employer)
To manage our relationship with you which will include:
(a) Notifying you about changes to our services, terms or privacy policy
(b) Asking you to leave a review or take a survey
(a) Identity
(b) Contact
(c) Profile
(d) Marketing and Communications
(a) Performance of a contract with you
(b) Necessary to comply with a legal obligation
(c) Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services)
To manage our Thanks Ben platform and services which will include:
- Keep our services and platform safe and secure
- Improving our services to ensure they are presented in the most effective manner
(a) Identity
(b) Contact
(c) Profile
(d) Usage
(e) Technical
(a) Performance of a contract with you
(b) Necessary for our legitimate interests (to deliver our services in a safe and user friendly manner)
To enable you to partake in a prize draw, competition or complete a survey
(a) Identity
(b) Contact
(c) Profile
(d) Usage
(e) Marketing and Communications
(a) Performance of a contract with you
(b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business)
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)
(a) Identity
(b) Contact
(c) Technical
(a) Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise)
(b) Necessary to comply with a legal obligation
To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you
(a) Identity
(b) Contact
(c) Profile
(d) Usage
(e) Marketing and Communications(f) Technical
Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy)
To use data analytics to improve our website, products/services, marketing, customer relationships and experiences
(a) Technical
(b) Usage
Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy)
To make suggestions and recommendations to you about products or services that may be of interest to you
(a) Identity
(b) Contact
(c) Technical
(d) Usage
(e) Profile
(f) Marketing and Communications
Necessary for our legitimate interests (to develop our products/services and grow our business)
Name and address of the Sub-processor
Description of the sub-performances
Place of performance
International Transfers and security measures
AMAZON WEB SERVICES
Greenhills Road, Tymon North, Dublin, Ireland
Data Hosting services
UK
ireland, GDPRAWS GDPR Data Processing AddendumCompliance Program AWS: CAS/ISO 9001/ISO 27001/ISO 27017/ ISO 27018/ PCI DSS level 1/ SOC 1 / SOC 2/ SOC 3
HUBSPOT
25 First Street, 2nd FloorCambridge, MA 02141, USA
Customer Relationship Management
USA
DPA and SCCs
ISO 27001 / SOC 2 and SOC 3 report
FULLSTORY
1745 Peachtree Rd NW Suite G, Atlanta, GA 30309, United States
Data Analytics
USA
DPA and SCCs
SO 27001 / SOC 2
INTERCOM
55 2nd Street, 4th Floor, San Francisco, CA 94105, USA
Support platform / Messaging system & Ticketing
USA
DPA and SCCs
ISO 27001 / SOC 2 / CSA
SLACK TECHNOLOGIES LIMITEDLevel 1, Block ANova Atria NorthSandyford Business DistrictDublin 18Ireland
Internal communication
Ireland
DPA and SCCsSO 27001 / SOC 2
JIRA (ATLASSIAN)Level 6, 341 George Street Sydney NSW 2000, Australia
Error tracking and agile project management software
Australia
DPA and SCCs
ISO/IEC 27001 / ISO/IEC 27018 / SOC-2 / SOC-3
Google HQ
Gordon House, Barrow Street,Dublin 4,Ireland
Email domain provider
Ireland
DPA and SCCs
SO 27001 / SOC 2
ZOOM
55 Almaden Blvd # 600, San Jose, CA 95113, USA
Video conference platform
USA
DPA and SCCs
SOC 2 (Type II) / CSA-STAR (Level 2) / International Association of Privacy Professionals