European Union General Data Protection Regulation (GDPR)
GDPR Common Questions
Effective May 25, 2018, the General Data Protection Regulation (GDPR) is a significant change to European Union (EU) privacy law. The regulation prioritizes an individual's right to control their personal information. It imposes new rules on companies, government agencies, non-profits, and other organizations outside the European Union that process personal data related to the offering of goods and services to people in the European Union (EU), or that monitor the behavior of EU citizens within the European Union.
How GDPR applies to ResLife Portal
ResLife Portal is both a controller and processor of personal information, and that information is stored in the United States. We control the personal information of those with whom we directly interact. Examples of this are users who create ResLife Portal user accounts or fill out a form on our website. We are a processor of personal information for other controller organizations (i.e., our customers and members) who have entrusted us with processing personal information that they control. Examples of this are ResLife Portal service, data that is uploaded as part of a technical support case, and contact information provided to us for a customer organization.
The GDPR details six legal bases that allow controllers (like ResLife Portal) to process personal information. They are: contractual necessity, legal obligation, vital interests, public interest, legitimate interest, and consent. Most of the work we do with customers is classified as contractual necessity or legitimate interest.
How ResLife Portal is taking action
ResLife Portal is committed to making best efforts to protect your personal information from any attacks or data breaches. We have implemented security controls throughout our business systems. In the unlikely event of data breach, we will honor the GDPR requirements for notification.
ResLife Portal has created a Data Processing Addendum that sets the conditions related to privacy, confidentiality, and security of EU personal data associated with online services and maintenance we provide to customers under our Terms of Service with ResLife Portal, or the then current click through agreement.
More information
If you have any questions or concerns regarding privacy issues or the GDPR, please contact privacy@reslifeportal.com or submit a trouble-ticket request.
Is ResLife Portal subject to the GDPR?
As well as applying to companies established in the EU, the GDPR also applies to companies, not established in the EU, where the company's processing activities are related to either: (i) offering goods or services to data subjects located in the EU; or (ii) monitoring the behavior of data subjects so far as their behavior takes place in the EU (e.g. monitoring via certain cookies).
ResLife Portal is not established in the EU – we have no subsidiaries or affiliates located in the EU. The GDPR also extends to certain companies located outside the EU that process personal data of individuals in the EU.
Will the GDPR affect ResLife Portal's agreements?
The GDPR may require us to incorporate certain provisions into our agreements with Customers subject to the GDPR when we process personal information on behalf of Customers who are subject to the GDPR.
Customer shall acknowledge and agree that ResLife Portal, acting as a Data Processor, is located in the United States and that Customer's provision of Personal Data to Data Processor for processing is a transfer of Personal Data to the United States.
ResLife Portal controls and operates the Services from within the United States of America and the entirety of the Services may not be appropriate or available for use in other locations.
Read more details in the Export section of our Terms of Service.
What happens if ResLife Portal experiences a data security incident?
We will notify Customers, without undue delay, when we become aware of a personal data breach materially affecting the personal data provided by Customers in such a way as to be likely to result in a high risk of adversely affecting individuals' rights and freedoms.
Users Outside the USA
Our application and database servers are located with our web infrastructure partner, Liquid Web, in the United States. Liquid Web has certified with the Department of Commerce that it adheres to the Privacy Shield Principles under the EU-U.S. Privacy Shield framework and the Swiss-U.S. Privacy Shield framework. Liquid Web Privacy Policy
