Terms & Policies

Transfer personal data outside EEA

Updated: 2021-09-08

From Europen Commission

“In today’s globalised world, there are large amounts of cross-border transfers of personal data, which are sometimes stored on servers in different countries. The protection offered by the General Data Protection Regulation (GDPR) travels with the data, meaning that the rules protecting personal data continue to apply regardless of where the data lands. This also applies when data is transferred to a country which is not a member of the EU (hereinafter referred to as ‘third country’)”. More information from EU here.

“Third country” – what does it mean?

Third countries – these are countries that do not belong to the European Economic Area (EEA). The EEA members are: all European Union  Member States and Iceland, Norway, Lichtenstein.

The GDPR ensured the legality of data transfer to third countries in CHAPTER V Transfers of personal data to third countries or international organisations of regulation no 2016/679.

FundingBox transfers personal data only to trusted recipients such as project partners, IT service providers, law firms, postal and courier companies (who usually process personal data on the FundingBox’s behalf).

Project partners are usually organizations with which we have jointly signed grant agreements or consortium agreements closely related to European Commission projects.

IT service providers are usually world leaders in ICT services and cloud computing.

According to Art. 13 and 14 of the GDPR, we provide information on the transfer of personal data outside the EEA to specific entities and reference to the appropriate or suitable safeguards and the means ensuring an adequate level of privacy protection.

IT SERVICE PROVIDERS

 

(1) Amazon Web Services Inc.

https://aws.amazon.com/
Amazon Web Services is a global cloud service provider. FBOX uses AWS services to provide, manage and maintain the FUNDINGBOX Platform (i.a. Open Call Management System, Spaces and Communities, Meetings etc.)

Appropriate safeguard:

based on articel 46.2 c) standard data protection clauses adopted by the
Commission (Decision of the European Commission No. 2010/87/EU of February 5, 2010 here)

Source:

AWS GDPR Data Processing Addendum page 9
Annex 2 Standard Contractual Clauses (processors) For the purposes of Article 26(2) of Directive 95/46/EC for the transfer of personal data to processors established in third countries which do not ensure an adequate level of data protection
External link: here.

(2) Google Inc.

(Google Workspace, Gmail, Google Calendar, Drive, Docs, Keep, Meets, Forms, Sites, Analytics) https://workspace.google.com/
Google is a global cloud service provider. FBOX uses online tools for external and internal communication, project and task management, online meetings, storing and sharing files, marketing analytics etc.

(3) Twilio (Sendgrid) https://sendgrid.com/
SendGrid is a communication platform used by FBOX for mass communication, mainly from sending email e.g. newsletters and other communications in our projects.

(4) The Rocket Science Group LLC (MailChimp) https://mailchimp.com/
SendGrid is a communication platform used by FBOX for mass communication, mainly from sending email e.g. newsletters and other communications in our projects.

(5) Microsoft https://www.microsoft.com/
Microsoft is a global cloud service provider. FBOX uses Microsoft;s office licencies and OneDrive to store and online share the files/folders.

(6) LogMeIn (GoToWebinar, GoToMeeting) https://www.logmein.com/
LogMeIn is a provider of online tools for remote work, including meetings, webinars and more.

(7) Cloudflare Inc https://www.cloudflare.com/
Cloudflare is a provider of online tools, mainly as hosting of e.g. websites or files.

(8) GitBook https://www.gitbook.com/
GitBook helps us publish docs for users and centralize your team’s knowledge for advanced collaboration e.g. for software developing.

(9) The Rocket Science Group LLC https://mailchimp.com/
Mailchimp is a communication platform used by FBOX for mass communication, mainly from sending email e.g. newsletters and other communications in our projects.

(10) Twitter Inc. https://twitter.com/
Twitter is a social networking site that provides a microblogging service used for promotional and dissemination activities.

(11) Basecamp LLC https://basecamp.com/
Basecamp is a project management tool for teams and tasks to be organized and for internal communication.

(12) Extreme Robotics Sp. z o. o. (Automade) https://automade.com/pl/
Automade is a robotic solution that enables the automation of business processes.

(13) Typeguard, Inc. (Glide App) https://www.glideapps.com/
Glide is a data editor used to connect, format, and enhance data from applications to create an overview of FBOX projects.

(14) Zoom Video Communications Inc. https://zoom.us/
Zoom is a provider of online tools for remote work, including meetings, webinars.

More information will be provided shortly. If you have any questions, please contact our FundingBox GDPR Team at privacy@fundingbox.com