GDPR FAQ
What is GDPR?
GDPR is a new set of rules designed to give EU residents more control over their personal data. It aims to simplify the regulatory environment for business so both citizens and businesses in the European Union can fully benefit from the digital economy.
Under the terms of GDPR, organizations that collect and manage personal data, will have to ensure that the data is gathered legally as well as be obliged to protect it from misuse and exploitation. Organizations that fail to respect the rights of data owners will have to face penalties for not doing so.
Who does it apply to?
GDPR applies to any organization operating within the EU, as well as any organizations outside of the EU which offer goods or services to customers or businesses in the EU. Any data generated within the boundaries of the EU Union is bound by GDPR standards. That ultimately means that almost every major corporation in the world will need to be ready when GDPR goes into effect on May 25, 2018.
What personal data does PlanGrid collect and store, and for what purposes?
At the time of registration, users are required to provide their name and email address to sign up for a PlanGrid account. Additionally, users may provide project related data based on their use case.
PlanGrid also collects data via marketing events, webinars and training sessions. We retain basic user contact information to send product updates, relevant marketing, training and events.
Please refer to our privacy policy here for more information on how we collect and use personal data.
May I opt out of PlanGrid Communications?
We retain basic user contact information to communicate with our customers about product and security updates, relevant marketing, training and events. Plangrid users may opt-out of communications through any one of the below three methods:
Where can I find information on PlanGrid’s security policies, management, and controls?
At PlanGrid, we understand that security of your data is vital to your business, and we take our responsibility to protect it very seriously. PlanGrid helps workers build better while safeguarding their data in the cloud by implementing stringent security measures and procedures at all levels, in accordance with industry-standard security programs. You can find more information about security measures at PlanGrid here.
Security and privacy certifications at PlanGrid
To give our customers added confidence that their data is secure and private, PlanGrid has taken the following initiatives -
a. SOC 2 compliance - PlanGrid has received SOC 2 Type I certification and is currently working towards SOC 2 Type II certification. A report can be requested under NDA by emailing security-request@plangrid.com.
b. Privacy Shield - PlanGrid is in the process of achieving both EU-U.S. and Swiss-U.S. Privacy Shield certifications.
Where does PlanGrid host customer data?
All our customer data is currently hosted in the AWS Virginia data center with data recovery set up at the AWS Oregon data center.
Will PlanGrid rectify / delete customer data when requested?
As a customer of PlanGrid, you have the ability to delete data that you upload into PlanGrid applications. Information about what data can be deleted or rectified and how it can deleted or rectified can be found in our Help Center. Organizations can remove users from the projects they own and deactivate the license. Users (individuals or organizations) can also request their data to be deleted / rectified by sending an email to privacy@plangrid.com.
Where can I find a list of PlanGrid’s sub processors?
The following is the list of major sub processors that PlanGrid uses. For a full list of sub processors please contact us at privacy@plangrid.com
Sub processor | Nature of Processing |
---|---|
Akamai | Web Performance monitoring |
AWS | Hosting service provider |
Compose.io | Database service provider |
Analytics, productivity and collaboration tools | |
Live Chat Inc | Customer chat support |
Logentries | Logging and monitoring |
Mailchimp / Mandrill | Email marketing platform |
Optimizely | Customer experience optimization |
Salesforce | Customer relationship management |
Zendesk | Customer support platform |
Sub-processor Updates
If you'd like to be notified when we add a new sub-processor, please subscribe to the email list below.