How the tools are categorized
This is my personal approach - how I determine whether I support the software or not. It is not a legal advice - it is personal opinion only and for informational purposes only.
My opinion how some wording could be interpreted:
I use the following approach: How easy is it to integrate the software in a eu-based business while personal data could be processed without the obligation to the business to get additional from the affected persons because of the software used. If the company has it’s headquarters in the US the participation in the Data Privacy Framework (DPF) can be appreciated.
The opinion is based on my personal subjective opinion.
Assume the contractual processing activities (not factual) of personal data where customer is the Controller and the SaaS is the Processor | ||||
could processing activity could leave the door open for:
| ||||
No | Yes | |||
Headquarters outside the EU/country with adequacy decision | Is it a processing activity I can control via the software interface - and does the DPA describe how to prevent the processing? | |||
Yes | No | Yes | No | |
Participation in the DPF | #I_personally_do_not_support_this_software | #I_personally_appreciate_this_software | #I_personally_do_not_support_this_software | |
Yes | No | |||
#I_personally_appreciate_this_software | #I_personally_do_not_support_this_software | |||