Legal
Data processors
Our Privacy and Data Protection Notice outlines the scope, nature, and purpose of data processing where we act as the Data Processor, including the duration of processing, types of personal data processed, and the data subjects involved, as required by Article 28 of the EU GDPR/UK GDPR.
- Sub-processors - entities contracted to provide specific services to Bookable.page to enable the delivery of our product and services to customers. Sub-processors are used in our role as a data processor.
- Processors in common - entities with which users must have an account and with whom we communicate via API as part of the Service. A processor in common is not a processor or sub-processor engaged by us; rather, they are an independent controller or processor of data that you have authorized to share data with us. The terms on which they process a user’s personal data are subject to the user’s separate agreement with them and their own privacy documentation. When we receive data from a processor in common, it will be handled in accordance with the terms of our privacy notice.
Sub-Processors | |||||
|---|---|---|---|---|---|
Company Name (including links to their statement of compliance) | DPAs / Privacy Shield Registration | Nature and purpose of service | Types of personal data (PII) processed | Duration of processing | Country where processor is based |
Web Hosting Cloud Service Provider | IP address, Name, email address, postal address, and other PII entered into Bookable booking form as may be requested by an Account holder | Data is held and managed via account holder’s cloud calendar account, and retrieved and held by AWS systems for a period of 12 months. | USA | ||
Processors in common | ||||
|---|---|---|---|---|
Company Name (including links to their statement of compliance) | Nature and purpose of service | Types of personal data (PII) processed | Duration of processing | Country where processor is based |
Calendar Cloud Service Provider | PII collected on a Booking form (name, email) | Subject to Data Controller | USA | |
Cloud Email Service Provider | Bookable account holder details - name and email address | Subject to Data Controller | USA | |
Cloud Service Provider and Services | Bookable account holder details - name and email address PII collected on a Booking form (name, email) | Subject to Data Controller | USA | |
Cloud Service Provider | PII collected on a Booking form (name, email) | Subject to Data Controller | USA | |
Cloud-based Payment Services | PII collected on a stripe-connect embedded payment form (name, email) | Subject to Data Controller | USA / Ireland | |
* Bookable account holders can choose to link to other calendar service providers as a ‘processor in common’ for the provision of the Service, where the relevant calendar provider allows such an integration.
This document may be updated from time to time. The user is responsible for ensuring they keep themselves informed and up to date with any changes.