General Data Protection Regulation (GDPR)

Section

Explanation

Individual in charge of GDPR

Ricky Thomas, CISO

Data Protection Officer

Ricky Thomas, CTO

Purpose of Processing

Continuous monitoring and evidence collection of security controls mapped to various compliance frameworks to streamline audit preparation and to efficiently remediate security and compliance gaps. For more details, see Streamkap’s Privacy Policy – How We Use Your Personal Information (https://streamkap.com/privacy).

Lawful Basis of Processing and Consent

Under Article 6 of GDPR (https://gdpr-info.eu/art-6-gdpr), it falls under:Consent: Via SAS Agreement and Opt-in of Terms and Conditions. Removal of consent will be done on request or via the Streamkap Web App.Contract: Via contracts with clients which give Streamkap permission to manage their Data for the purpose of helping them achieve Data Privacy and Security Compliance.Legitimate Interest: It is in the legitimate interest of clients to share their data with Streamkap for the purpose of helping them achieve Data Privacy and Security Compliance.For more information, see the Streamkap Privacy Policy (https://streamkap.com/privacy) – “GDPR Notice” section

Withdrawal of consent (or opt out)

For Users, withdrawal of consent or opting out after initial consent/opt-in will be able available via the web app (https://app.streamkap.com).
For Visitors, opting out can be done by emailing privacy@streamkap.com.

Cookie Policy

Deletion Policy

Deletion of data for clients is available when terminating a contract.
Data Deletion on the website (Streamkap.com) for visitors can be done by contacting privacy@streamkap.com

Data Access / Modification
/ Portability

Users can Access, Modify and Download their data directly from the Web App. Visitors can request a copy or update of their data by emailing privacy@streamkap.com.

Data Protection Info

Streamkap deploys and maintains a single tenant Database architecture, alongside best industry practices in security attested to in a SOC 2 Type 2 report covering security, confidentiality, availability, and processing integrity.

Notification of Data Breach

Streamkap’s data breach notification process is outlined within its Incident Response Policy, and made available upon request.