Data processor
A person or organisation that processes personal data on behalf of another (the controller) and following its instructions.
A data processor processes personal data on behalf of the controller, without deciding what it’s used for (Art. 4 GDPR). Cloud software, payroll or customer service providers are usually processors for their clients.
Art. 28 of the GDPR requires the controller to choose processors that offer sufficient guarantees and to sign a data processing agreement with them. The processor may only use the data as instructed, must protect it and can’t bring in other suppliers (sub-processors) without authorisation.
- Where is the data stored and processed?
- Which sub-processors are involved, and for what?
- Does it use the data to train its models?
- How is the data deleted at the end?
For the content of a company’s recordings, Edorteam is the processor. Data and AI run on its own servers in the European Union, no model is trained on your meetings and the agreement is published as the data processing agreement (in Spanish). The list of sub-processors is on the security page.
