The General Data Protection Regulation, or GDPR, sets requirements for collecting, processing, storing, and protecting personal data. It entered into application on May 25, 2018.

This article explains Pressidium’s role when processing customer data and where you can find the Pressidium Data Processing Agreement.

What this article covers

This article explains:

  • how data-controller and data-processor roles relate to Pressidium
  • how Pressidium supports customers with their GDPR obligations
  • where to find the Pressidium Data Processing Agreement
  • how to access the separate signing instructions

This article provides general platform information and does not constitute legal advice.

When to use

Use this article when you need to:

  • understand Pressidium’s role in processing personal data
  • evaluate Pressidium as part of your GDPR compliance process
  • find the Data Processing Agreement
  • maintain compliance documentation for your organization

Controllers and processors under the GDPR

The GDPR distinguishes between data controllers and data processors.

A data controller determines why and how personal data is processed. A data processor processes personal data on behalf of a controller.

Where Pressidium processes personal data on behalf of a customer, Pressidium acts as a data processor. Your organization’s responsibilities depend on the personal data it processes and its role under the GDPR.

The responsibilities of a processor toward a controller must be defined through a contract or another legal agreement.

The controller and processor definitions above reflect European Commission guidance. Pressidium’s existing documentation describes Pressidium as a vendor and GDPR-compliant data processor.

Pressidium’s Data Processing Agreement

Pressidium provides customers with a Data Processing Agreement that can be reviewed and accepted through the Pressidium Dashboard.

After the agreement is signed:

  • its acceptance is recorded electronically
  • the agreement takes effect
  • a PDF copy becomes available for download

To complete this process, follow [Review and sign the Data Processing Agreement].

The current Pressidium article confirms that the agreement is available through Personal Settings and can be signed and downloaded from the Dashboard.

Your organization’s responsibilities

A Data Processing Agreement documents responsibilities between a controller and a processor. Signing the agreement does not replace your organization’s wider GDPR responsibilities.

Your organization should assess:

  • which personal data it processes
  • why that data is processed
  • which organizations process data on its behalf
  • which legal and operational measures apply to its activities

Consult a qualified legal or privacy professional when you need advice about your organization’s obligations.

Need help?

If you cannot locate the Data Processing Agreement in the Dashboard, contact Support and provide:

  • the email address associated with your account
  • a screenshot of the Security & Privacy section
  • a description of what you expected to see

Open a support request.

Where to go next