Check out this article for information on what we're doing and what you can do to ensure compliance with the General Data Protection Regulation (GDPR).
What is the GDPR?
Effective in May 2018, the European Union updated its data protection regulations. The General Data Protection Regulation (GDPR) regulates how companies access and process the data of people in the European Union (EU). This applies to all companies who do business with people that are EU persons, regardless of where the company is based.
How is Copper compliant with the GDPR?
Copper has an active data privacy compliance program, which includes taking the following actions to protect our EU customers’ data and remain GDPR compliant.
We follow the GDPR data processing requirements.
We contractually require relevant third-party service providers to support our obligations under GDPR.
We publish a list of all third-party providers we work with who may access customer data.
We provide privacy and information training to all employees interacting with customer data.
We maintain a security incident response program.
We are regularly audited by a third party to test our vulnerability risks.
Where can I get more information?
To learn more about GDPR, visit eugdpr.eu. For questions regarding Copper's GDPR compliant, please contact our support team using the in-app chat.
How can I view and sign your Data Processing Agreement (DPA)?
Copper’s Data Protection Addendum describes our obligations when we process personal information on a customer’s behalf.
The DPA is incorporated by reference into our Terms of Service. It applies to the extent that customer content includes personal information whose processing is subject to applicable data protection law.
To view or download the DPA, visit Copper’s Terms of Service and open the DPA link in Section 4.4, “Data Protection Addendum.”
Copper will also enter into its standard DPA on a stand-alone basis upon request. Contact our support team through the in-app chat to request this.