GDPR
GDPR Compliance
floreysoft makes it easy for our users to show that they use our services in a GDPR-compliant way. To make it convenient and easy, we provide a DPA (Data Processing Addendum), which is a self-serve and easy-to-execute document pre-signed by floreysoft. It only requires an electronic signature from the user.
Name and address of the data controller
The responsible person within the meaning of the General Data Protection Regulation law and other national data protection laws within Germany's federal states, as well as any other provisions on data protection, is:
floreysoft GmbH
Telemannstraße 22
20255 Hamburg
Germany
Email: [email protected]
Name and address of the data protection officer
At floreysoft less than 10 people are involved in data processing so no dedicated data protection officer is required.
Sign the DPA
Once the DPA is filled out and submitted, it will automatically be sent to us for final review. If it is correctly completed, the DPA will then become legally binding. You can provide the DPA to auditors to show that you use our services in a way that demonstrates your data is being processed in a way that meets your GDPR compliance obligation.
Data processing
We will try to give a simple overview of what happens to your personal information when using Ultradox.
Environments
Public cloud
When using the single-user or SMB licenses all data will be stored in a shared project on Google’s Cloud Platform, referred to below as the “datastore”.
floreysoft will be able to access the stored data as well as the logs.
Dedicated cloud
When using the enterprise edition you may get a dedicated cloud environment (=your own cloud project) on Google’s Cloud Platform.
All data is then stored in your dedicated datastore, referred to below as the “datastore”. You will be in full control of the access permissions and floreysoft will not have access to any of the stored data or server logs at all unless you grant access for support purposes.
Datastore
When working with Ultradox the configuration of your automations will be stored in the datastore.
We will also store user settings like the preferred email provider.
Logs
No data will be logged on our servers unless you explicitly enable logging for your account. Logging can greatly help us to track down any issues that you may encounter while building or running your automations.
Access to your Google Account
To use the service you’ll have to login with your Google account. We store the information from your personal profile like email, name and preferred language in the datastore.
When logging in for the first time, you will also have to grant access to your Google Drive. The credentials to access these services on your behalf are stored in the datastore.
Google Drive
Ultradox requires full access to your Google Drive in order to provide the service. Full access is required so that Ultradox can open and create files on your Google Drive containing the automation as well as copying examples to your Google Drive.
Additional services
Whenever you use building blocks in your automation that require access to additional services you will be prompted to grant Ultradox access to these services.
You can revoke the permissions at any time from the account dialog in the Ultradox editor.
No data from authorized services will be stored in the data store when merging documents
Questions and Feedback
If you have any comments on this page, feel free to add suggestions right to the Google document that we are using to create this site.
If you are not yet member of the Doxey community, please join now to get updates from our end or to provide feedback, bug reports and discuss with other users.
Last Updated: 04.11.19