Categories of data subjects whose personal data is transferred: the data subjects may include your customers, employees, suppliers and end-users as further set out in the relevant Privacy Policy, available here: https://safetyculture.com/legal/privacy-policy/. Categories of personal data transferred: Customer Personal Data as further set out in relevant Privacy Policy, available here: https://safetyculture.com/legal/privacy-policy/. Sensitive data transferred (if applicable) and applied restrictions or safeguards that fully take into consideration the nature of the data and the risks involved, such as for instance strict purpose limitation, access restrictions (including access only for staff having followed specialised training), keeping a record of access to the data, restrictions for onward transfers or additional security measures: no sensitive data shall be transferred by the data exporter to the data importer, and as per the Agreement including without limitation and where relevant SafetyCulture’s technical and organisational security measures are described at https://safetyculture.com/security/. The frequency of the transfer (e.g. whether the data is transferred on a one-off or continuous basis): continuous unless otherwise specified in the Agreement. Nature of the processing: data hosting, storage and such other services as are described in the Agreement. Purpose(s) of the data transfer and further processing: the purpose of the data processing is the provision of the Services under the Agreement. The period for which the personal data will be retained, or, if that is not possible, the criteria used to determine that period: personal data will be retained until such time as you notify SafetyCulture that you would like the personal data returned to you or deleted in accordance with the Agreement. For transfers to (sub-) processors, also specify the subject matter, nature and duration of the processing: subject matter of the processing is the processing of Customer Personal Data in connection with the performance of the Agreement; nature of processing is as described in the Agreement; and the duration of the processing is determined by you, subject to the other provisions of the Agreement. |