Compliance
Scavenger AI GmbH is based in Frankfurt am Main, Germany, and processes personal data under the EU General Data Protection Regulation (GDPR).
The data processing agreement
Section titled “The data processing agreement”Where we process personal data on your company’s behalf, the data processing agreement (Auftragsverarbeitungsvertrag, AVV) under Art. 28 GDPR applies. For the Strategy Agent, your company’s first admin accepts it together with the terms at their first sign-in.
What we have in place
Section titled “What we have in place”- A data protection officer: heyData GmbH.
- Technical and organisational measures under Art. 32 GDPR, listed in Annex 3 of the data processing agreement.
- A record of processing activities under Art. 30 GDPR.
- Confidentiality obligations and regular data protection training for our staff.
- Reporting processes for personal data breaches to the supervisory authorities and the people concerned.
Transfers outside the EU
Section titled “Transfers outside the EU”Where a service provider processes data outside the European Economic Area, the transfer rests on an adequacy decision of the EU Commission, such as the EU-US Data Privacy Framework, or on standard contractual clauses. Section 1.3 of the privacy policy explains this. Data residency shows where the Strategy Agent processes data.
Checking our measures
Section titled “Checking our measures”Your company may check our technical and organisational measures before processing begins and once a year after that, as § 7 of the data processing agreement describes.