Prism and third-party data processors
Learn more about the external companies we work with in order to deliver our statistical support services to clients.
We use a number of external, third-party companies to provide us with the project management tools, office infrastructure software and data storage required to successfully deliver our statistical support services. In certain cases, it may be necessary to process client's personal data with these third-party companies.
These companies - and their related Privacy Policies which we adhere to - are as follows:
- Microsoft Office 365 - click here for their privacy policy.
- Google Drive - click here for their privacy policy.
- Basecamp - click here for their privacy policy.
- Trello - click here for their privacy policy.
- Campaign Monitor - click here for their privacy policy.
- Box.net - click here for their privacy policy.
- Stat-Ease, Inc. - click here for their privacy policy.
- Formagrid Inc ("Airtable") - click here for their privacy policy.
- Umbraco A/S - click here for their privacy policies.
Many of these companies have data centres both inside and outside of the European Economic Area (EEA). These are listed below, along with the relevant safeguard each company has in place to ensure your data is kept safe:
|
Description of processing |
Recipient |
Destination to which data is transferred |
Safeguards |
|---|---|---|---|
|
Storage of data using a third-party platform |
Basecamp LLC |
USA |
We have a data processing addendum with Standard Contractual Clauses with Basecamp; details here. |
|
Storage of data using a third-party platform |
Microsoft Corporation |
USA |
Microsoft has publicly committed to the Privacy Shield Principles and has self-certified its compliance with its requirements. |
|
Storage of data using a third-party platform |
Trello, Inc. |
USA |
Trello, Inc. is registered under the EU-US Privacy Shield. See here. |
|
Storage of data using a third-party platform |
Campaign Monitor Pty Limited |
USA |
Campaign Monitor Pty Limited have implemented the European Commission's Standard Contractual Clauses for transfers of personal information between their group companies and have implemented similar safeguards with their third party service providers and partners. Prism has entered into a Data Protection Addendum (EU Standard Contractual Clauses) with Campaign Monitor Pty Limited. |
|
Storage of data using a third-party platform |
Box, Inc. |
USA |
Box, Inc. is registered under the EU-US Privacy Shield |
|
Storage of data using a third-party platform |
Google LLC |
USA |
Google LLC is registered under the EU-US Privacy Shield |
|
Sharing and storage of data to allow management & delivery of statistical software |
Stat-Ease, Inc. |
USA |
Prism and Stat-Ease have entered into a Distribution Agreement containing a GDPR Addendum to ensure compliance relevant data protection law requirements. |
|
Storage of data using a third-party platform |
Formagrid Inc. |
USA |
Prism has a signed DPA (which includes standard contractual clauses or "Model Clauses") in place with Formagrid Inc. for our use of their online workflow tool Airtable. |
|
Storage of data using a third-party platform |
Umbraco A/S |
UK |
We have Standard Contractual Clauses documentation in place with Umbraco; details here. |