Last updated:
Roles
The institution is the data controller; CareerBook ERP™ is the data processor and processes personal data only on the institution's documented instructions.
Key commitments
Under the DPA, CareerBook ERP™ commits to:
- Confidentiality obligations for all personnel with data access
- Appropriate technical and organisational security measures
- Advance notice of new sub-processors
- Assistance with data subject requests and impact assessments
- Breach notification without undue delay
- Return or deletion of data at the end of the contract
Data location & transfers
Customer data is hosted in the region agreed in the subscription. Cross-border transfers, where needed, are protected by appropriate contractual safeguards.