Processing Customer Data
EUM is a SaaS (Software as a Service) solution that enables your organization to securely share content on the Microsoft 365 platform and is built for that purpose. The data processing instructions regarding purpose and subject matter is therefore to process data to provide, deliver and improve the services we offer (The EUM Platform) and perform essential business operations related to our Platform (which may include the detection, prevention, and resolution of security and technical issues). This includes operating the services, maintaining and improving the performance of the services, including developing new features, researching, and providing customer support for customers using and leveraging our platform and services.
In the EUM Platform, there is a built-in Admin Consent flow for all Customers signing up on the Platform, ensuring that all Customers agree to our terms and conditions, including entering into a data processing agreement. By signing up on the EUM Platform, Customers enter into a contract between the Customer and EUM. That contract describes the services we will provide to the Customer, how we will work together, and other aspects of our business relationship. Accepting these terms by signing up on our Platform as part of the consent flow is necessary for us to provide our services to Customers. If the terms are not accepted, the Customer can’t use our Platform.
By signing up on the EUM Platform and accepting the terms of the EUM Services (Terms & Conditions, Service Level Agreement, and Data Processing Agreement), the Customer agrees to these terms as a Customer. When the person who is signing up agrees to these terms for use of the EUM Services by an organization, that person is agreeing on behalf of that organization.
Therefore, that person must have the authority to bind that organization to these terms (Terms & Conditions, Service Level Agreement, and Data Processing Agreement). Otherwise, the person must not sign up for the Services nor accept these terms.
Signing up as a Customer, the Applicable Data Protection Law requires a Data Processing Agreement between the Controller (the Customer) and the Processor (EUM) for the Processing of Personal Data.
The Processor processes Personal Data based on Personal Data being defined as:
- "Personal Data" means any information relating to an identified or identifiable natural person ("data subject"); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, or an online identifier of that person.
- The Processor (EUM) does not process Sensitive Personal Data, following the definition of "Sensitive Personal Data" as personal data, revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership; data concerning health or sex life and sexual orientation; genetic data or biometric data. Data relating to criminal offenses and convictions are addressed separately (as criminal law lies outside the EU's legislative competence).
- The Processor (EUM), does not process data specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person, including identifiers such as genetic data and all data pertaining to a data subject’s health status.
By signing up on the Platform and agreeing to the overall terms of using our Services, the Customer is therefore entering the Data Processing Agreement with EUM for the processing of Customer Data as set out in this DPA, that reflects the parties’ agreement with respect to the terms governing the Processing of Personal Data.
When a Customer signs up on our Platform, accepting the terms and starts using the service, EUM is then processing, using and collecting Personal Data from the Customer (Data Controller) to operate effectively and provide the customer (Data Controller) the best experiences with the services.
EUM will process Personal Data as necessary to perform the Services pursuant to the agreement made with the customer, as further specified in the Documentation, and as further instructed by Controller in its use of the EUM Services.