{"id":29972,"date":"2023-01-11T10:12:34","date_gmt":"2023-01-11T10:12:34","guid":{"rendered":"https:\/\/stagingwww.zycus.com\/?page_id=29972"},"modified":"2026-01-28T10:16:16","modified_gmt":"2026-01-28T10:16:16","slug":"zycus-and-gdpr-3","status":"publish","type":"page","link":"https:\/\/dev.zycus.com\/freshz\/zycus-and-gdpr","title":{"rendered":"ZYCUS and GDPR"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"29972\" class=\"elementor elementor-29972\" data-elementor-post-type=\"page\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-64196f91 elementor-section-stretched elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"64196f91\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;stretch_section&quot;:&quot;section-stretched&quot;,&quot;background_background&quot;:&quot;classic&quot;,&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-428dd27e\" data-id=\"428dd27e\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-1f455ff1 elementor-widget elementor-widget-shortcode\" data-id=\"1f455ff1\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"shortcode.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-shortcode\"><div class=\"ast-breadcrumbs-wrapper\">\n\t\t\t<div class=\"ast-breadcrumbs-inner\"><nav role=\"navigation\" aria-label=\"Breadcrumbs\" class=\"breadcrumb-trail breadcrumbs\" ><div class=\"ast-breadcrumbs\"><ul class=\"trail-items\" ><li  class=\"trail-item trail-end\"><span><a href=\"https:\/\/dev.zycus.com\/freshz\/\" rel=\"home\"><span >Home<\/span><\/a><\/span><\/li><\/ul><\/div><\/nav><\/div>\n\t\t<\/div>\n<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-251dcb1e elementor-widget elementor-widget-heading\" data-id=\"251dcb1e\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Zycus and GDPR<\/h1>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-4b401f7f elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"4b401f7f\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-612987ee\" data-id=\"612987ee\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-a181586 elementor-widget elementor-widget-heading\" data-id=\"a181586\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">GDPR roles and definitions relating to Zycus:<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3a939c66 elementor-widget elementor-widget-text-editor\" data-id=\"3a939c66\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t\t\tGDPR applies to both Controllers and Processors that are established in the EU and also to any Controller and Processor not located in the EU, where the processing activities are related to either the offering of goods or services to data subjects in the EU (irrespective of whether a payment is required) or the monitoring of the behavior of individuals as far as such behavior takes place within the EU.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b7f155a elementor-widget elementor-widget-text-editor\" data-id=\"b7f155a\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t\t\tGDPR is quite specific about the duties of the Controller and the Processor and indeed Article 28 (3) of GDPR stipulates that there must be a contract in writing between the Controller and Processor which clearly sets out the subject matter of the processing and its duration as well as the nature and purposes of processing, the types of personal data, and the obligations and rights of both parties.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-50d9bb6 elementor-widget elementor-widget-text-editor\" data-id=\"50d9bb6\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t\t\t<p><strong>Article 4 EU GDPR defines data controllers and data processors as below:<\/strong><\/p><ul class=\"sq-yellow\"><li>&#8216;controller&#8217; means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;<\/li><li>&#8216;processor&#8217; means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8a08de1 elementor-widget elementor-widget-text-editor\" data-id=\"8a08de1\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t\t\t<p><strong>In other words, the data controller<\/strong>\u00a0determines the\u00a0<strong>purposes<\/strong>\u00a0for which and the\u00a0<strong>means<\/strong>\u00a0by which personal data is processed and the\u00a0<strong>data processor<\/strong>\u00a0processes personal data only\u00a0<strong>on behalf of the controller<\/strong>. The data processor is usually a third-party external to the company.<\/p><p>In general, the controller assumes responsibility for all personal data collected and must ensure that rights of the data subject and the controller\u2019s own legal obligations are also covered by the processor.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-a186583 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"a186583\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-cc398ba\" data-id=\"cc398ba\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-22bd916 elementor-widget elementor-widget-text-editor\" data-id=\"22bd916\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t\t\t<p>The Data Processing Agreement is important, so that both parties understand their responsibilities and liabilities. When it comes to Zycus, our customers are data controllers when they use Zycus applications (Source to Pay suite of procurement performance solutions). Zycus is a data processor on behalf of the customer by means of Data Processing Addendum.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-2f3170e elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"2f3170e\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-5fb4ce3\" data-id=\"5fb4ce3\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-45a5903 elementor-widget elementor-widget-heading\" data-id=\"45a5903\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">ZYCUS\u2019 DATA PROCESSING AGREEMENT (DPA)<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2dd8a64 elementor-widget elementor-widget-text-editor\" data-id=\"2dd8a64\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t\t\tZycus is committed to have such Data Processing Agreement executed with its customers. You can find Zycus\u2019 Data Processing Agreement (DPA)\u00a0<a href=\"https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/latest-Data-protection-June-2018.pdf\" target=\"_blank\" rel=\"noopener\"><strong>here<\/strong><\/a>.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-61457be elementor-widget elementor-widget-text-editor\" data-id=\"61457be\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t\t\t<p>Zycus\u2019 Data Processing Agreement terms are designed to ensure that processing carried out by a processor meets all the requirements of the GDPR (not just those related to keeping personal data secure). By having such DPA in place with the required terms, we are ensuring that we are complying with the GDPR.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-ee36455 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"ee36455\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-814079f\" data-id=\"814079f\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-bbb63da elementor-widget elementor-widget-heading\" data-id=\"bbb63da\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">PREPARING FOR EUROPE\u2019S BIGGEST EVER CHANGE TO DATA REGULATIONS \u2013\nHow Zycus is getting ready for GDPR?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-69fcad3 elementor-widget elementor-widget-heading\" data-id=\"69fcad3\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">GDPR roles and definitions relating to Zycus:<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2f98842 elementor-widget elementor-widget-text-editor\" data-id=\"2f98842\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t\t\t<p>At Zycus we have state-of-the-art security to ensure that data from our prospects and customers is never compromised. We know that security is crucial to you; therefore, security is our top priority and it is fundamental to successful operation of Zycus. We devote significant resources to continually improve our world-class security infrastructure. The result: unsurpassed security and privacy for our customers&#8217; information.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e89524f elementor-widget elementor-widget-heading\" data-id=\"e89524f\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Standards and Specifications<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3b2aef5 elementor-widget elementor-widget-text-editor\" data-id=\"3b2aef5\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t\t\t<p>Zycus rely on SSAE 16 and SOC 1 &amp; 2 Type II audits and reports to build trust and confidence. The SOC 1 Type II report provides reasonable assurance over the effectiveness of the controls at Zycus which are directly or indirectly relevant to our customers financial reporting and SOC 2 type II report provides reasonable assurance over the controls that are relevant to the Trust Service Principals of Service Organization Control (security, availability and confidentiality). The SOC 2 Type II report also describes the operating effectiveness of these controls and it is the most comprehensive type of report. With our SOC1 &amp; 2 audit reports, we can assure our customers that we meet the most demanding requirements for the security, availability and confidentiality of their information.\u201d<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0233c41 elementor-widget elementor-widget-text-editor\" data-id=\"0233c41\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t\t\tAlso, Zycus follows ISO 27001:2013 ISMS standard and we have developed our policies and procedures based on this framework. Zycus is in the process of incorporating GDPR compliance management structure in our current ISMF, which is cross-functional and represents all key areas within the business. The current ISMS risk management process is also under review to incorporate privacy risk management.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-9bd04fa elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"9bd04fa\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-6f8836e\" data-id=\"6f8836e\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-56cae04 elementor-widget elementor-widget-heading\" data-id=\"56cae04\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Key pointers surrounding GDPR pertaining to Zycus<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-88a348e elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"88a348e\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-25 elementor-inner-column elementor-element elementor-element-672673b\" data-id=\"672673b\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-3733f4b elementor-position-top elementor-widget elementor-widget-image-box\" data-id=\"3733f4b\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"image-box.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-image-box-wrapper\"><figure class=\"elementor-image-box-img\"><img decoding=\"async\" width=\"210\" height=\"210\" src=\"https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-2.png\" class=\"attachment-full size-full wp-image-29896\" alt=\"gdpr_Icon-2\" srcset=\"https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-2.png 210w, https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-2-150x150.png 150w\" sizes=\"(max-width: 210px) 100vw, 210px\" \/><\/figure><div class=\"elementor-image-box-content\"><h3 class=\"elementor-image-box-title\">Consent<\/h3><p class=\"elementor-image-box-description\">Consent to obtain personal data is done through acceptance of Zycus\u2019 privacy policy, which includes the purpose, the categories of personal data, and other relevant considerations.<\/p><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-25 elementor-inner-column elementor-element elementor-element-3aea27c\" data-id=\"3aea27c\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-8f2f8e4 elementor-position-top elementor-widget elementor-widget-image-box\" data-id=\"8f2f8e4\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"image-box.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-image-box-wrapper\"><figure class=\"elementor-image-box-img\"><img decoding=\"async\" width=\"210\" height=\"210\" src=\"https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-3.png\" class=\"attachment-full size-full wp-image-29895\" alt=\"gdpr_Icon-3\" srcset=\"https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-3.png 210w, https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-3-150x150.png 150w\" sizes=\"(max-width: 210px) 100vw, 210px\" \/><\/figure><div class=\"elementor-image-box-content\"><h3 class=\"elementor-image-box-title\">Access to Data<\/h3><p class=\"elementor-image-box-description\">Personal data can be accessed only by a user who has been authorized by Zycus authorization mechanisms<\/p><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-25 elementor-inner-column elementor-element elementor-element-79c9e0f\" data-id=\"79c9e0f\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-c29f73d elementor-position-top elementor-widget elementor-widget-image-box\" data-id=\"c29f73d\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"image-box.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-image-box-wrapper\"><figure class=\"elementor-image-box-img\"><img decoding=\"async\" width=\"210\" height=\"210\" src=\"https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-5-1.png\" class=\"attachment-full size-full wp-image-30054\" alt=\"gdpr_Icon-5-1\" srcset=\"https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-5-1.png 210w, https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-5-1-150x150.png 150w\" sizes=\"(max-width: 210px) 100vw, 210px\" \/><\/figure><div class=\"elementor-image-box-content\"><h3 class=\"elementor-image-box-title\">Right to Rectification<\/h3><p class=\"elementor-image-box-description\">Zycus has the right to edit or correct customer\u2019s personal data in the user profile during the contract period.<\/p><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-25 elementor-inner-column elementor-element elementor-element-df0062d\" data-id=\"df0062d\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-a9d4958 elementor-position-top elementor-widget elementor-widget-image-box\" data-id=\"a9d4958\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"image-box.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-image-box-wrapper\"><figure class=\"elementor-image-box-img\"><img loading=\"lazy\" decoding=\"async\" width=\"210\" height=\"210\" src=\"https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-5.png\" class=\"attachment-full size-full wp-image-29898\" alt=\"gdpr_Icon-5\" srcset=\"https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-5.png 210w, https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-5-150x150.png 150w\" sizes=\"(max-width: 210px) 100vw, 210px\" \/><\/figure><div class=\"elementor-image-box-content\"><h3 class=\"elementor-image-box-title\">Erasure of Data<\/h3><p class=\"elementor-image-box-description\">Zycus deletes all customer data which, upon termination \/ expiry of contract.<\/p><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-e2d8863 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"e2d8863\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-25 elementor-inner-column elementor-element elementor-element-5a53a80\" data-id=\"5a53a80\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-475979f elementor-position-top elementor-widget elementor-widget-image-box\" data-id=\"475979f\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"image-box.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-image-box-wrapper\"><figure class=\"elementor-image-box-img\"><img loading=\"lazy\" decoding=\"async\" width=\"210\" height=\"210\" src=\"https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-6.png\" class=\"attachment-full size-full wp-image-29891\" alt=\"gdpr_Icon-6\" srcset=\"https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-6.png 210w, https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-6-150x150.png 150w\" sizes=\"(max-width: 210px) 100vw, 210px\" \/><\/figure><div class=\"elementor-image-box-content\"><h3 class=\"elementor-image-box-title\">Authorization and Disclosure control<\/h3><p class=\"elementor-image-box-description\">Customers can manage authorization, authentication and role based access in Zycus\u2019 solution.<\/p><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-25 elementor-inner-column elementor-element elementor-element-0e7dc6e\" data-id=\"0e7dc6e\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-7347872 elementor-position-top elementor-widget elementor-widget-image-box\" data-id=\"7347872\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"image-box.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-image-box-wrapper\"><figure class=\"elementor-image-box-img\"><img loading=\"lazy\" decoding=\"async\" width=\"210\" height=\"210\" src=\"https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-8.png\" class=\"attachment-full size-full wp-image-29893\" alt=\"gdpr_Icon-8\" srcset=\"https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-8.png 210w, https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-8-150x150.png 150w\" sizes=\"(max-width: 210px) 100vw, 210px\" \/><\/figure><div class=\"elementor-image-box-content\"><h3 class=\"elementor-image-box-title\">Privacy by Design and by Default<\/h3><p class=\"elementor-image-box-description\">For development of any feature Zycus considers GDPR regulations and standard security guidelines.<\/p><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-25 elementor-inner-column elementor-element elementor-element-baa7cd3\" data-id=\"baa7cd3\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e5c33d7 elementor-position-top elementor-widget elementor-widget-image-box\" data-id=\"e5c33d7\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"image-box.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-image-box-wrapper\"><figure class=\"elementor-image-box-img\"><img loading=\"lazy\" decoding=\"async\" width=\"210\" height=\"210\" src=\"https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-1.png\" class=\"attachment-full size-full wp-image-29894\" alt=\"gdpr_Icon-1\" srcset=\"https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-1.png 210w, https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-1-150x150.png 150w\" sizes=\"(max-width: 210px) 100vw, 210px\" \/><\/figure><div class=\"elementor-image-box-content\"><h3 class=\"elementor-image-box-title\">Data Breach Notification<\/h3><p class=\"elementor-image-box-description\">Zycus services are obligated to notify, within 72 hours, in case of any data breach without any undue delay.<\/p><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-25 elementor-inner-column elementor-element elementor-element-948aef1\" data-id=\"948aef1\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-ed19ea7 elementor-position-top elementor-widget elementor-widget-image-box\" data-id=\"ed19ea7\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"image-box.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-image-box-wrapper\"><figure class=\"elementor-image-box-img\"><img loading=\"lazy\" decoding=\"async\" width=\"210\" height=\"210\" src=\"https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-11.png\" class=\"attachment-full size-full wp-image-30055\" alt=\"gdpr_Icon-11\" srcset=\"https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-11.png 210w, https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-11-150x150.png 150w\" sizes=\"(max-width: 210px) 100vw, 210px\" \/><\/figure><div class=\"elementor-image-box-content\"><h3 class=\"elementor-image-box-title\">Subprocessor Compliance<\/h3><p class=\"elementor-image-box-description\">Zycus ensures ongoing subprocessor compliance using corporate standard purchasing processes by subprocessor contract vetting and assessment of security risks. This is in accordance with the DPA.<\/p><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-7c6a76a elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"7c6a76a\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-20 elementor-inner-column elementor-element elementor-element-2392b0b\" data-id=\"2392b0b\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap\">\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-20 elementor-inner-column elementor-element elementor-element-4ff3680\" data-id=\"4ff3680\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-bdd8cb1 elementor-position-top elementor-widget elementor-widget-image-box\" data-id=\"bdd8cb1\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"image-box.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-image-box-wrapper\"><figure class=\"elementor-image-box-img\"><img loading=\"lazy\" decoding=\"async\" width=\"210\" height=\"210\" src=\"https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-9.png\" class=\"attachment-full size-full wp-image-30051\" alt=\"gdpr_Icon-9\" srcset=\"https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-9.png 210w, https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-9-150x150.png 150w\" sizes=\"(max-width: 210px) 100vw, 210px\" \/><\/figure><div class=\"elementor-image-box-content\"><h3 class=\"elementor-image-box-title\">Transparency<\/h3><p class=\"elementor-image-box-description\">Zycus services keep the records of processing activities in accordance with GDPR requirements for data processors to aid customers to fulfill their obligations.<\/p><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-20 elementor-inner-column elementor-element elementor-element-e684d82\" data-id=\"e684d82\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-f113435 elementor-position-top elementor-widget elementor-widget-image-box\" data-id=\"f113435\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"image-box.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-image-box-wrapper\"><figure class=\"elementor-image-box-img\"><img loading=\"lazy\" decoding=\"async\" width=\"210\" height=\"210\" src=\"https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-10.png\" class=\"attachment-full size-full wp-image-30052\" alt=\"gdpr_Icon-10\" srcset=\"https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-10.png 210w, https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-10-150x150.png 150w\" sizes=\"(max-width: 210px) 100vw, 210px\" \/><\/figure><div class=\"elementor-image-box-content\"><h3 class=\"elementor-image-box-title\">Accountability<\/h3><p class=\"elementor-image-box-description\">Zycus will deliver all the ongoing accountability activities such as regular risk assessment and security assessment of applications, network, and IT infrastructure; documented security programs and policies; and regular security trainings with guaranteed assurance.<\/p><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-20 elementor-inner-column elementor-element elementor-element-d274e58\" data-id=\"d274e58\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-afbff51 elementor-position-top elementor-widget elementor-widget-image-box\" data-id=\"afbff51\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"image-box.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-image-box-wrapper\"><figure class=\"elementor-image-box-img\"><img loading=\"lazy\" decoding=\"async\" width=\"210\" height=\"210\" src=\"https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-8-1.png\" class=\"attachment-full size-full wp-image-30053\" alt=\"gdpr_Icon-8-1\" srcset=\"https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-8-1.png 210w, https:\/\/dev.zycus.com\/freshz\/wp-content\/uploads\/2023\/01\/gdpr_Icon-8-1-150x150.png 150w\" sizes=\"(max-width: 210px) 100vw, 210px\" \/><\/figure><div class=\"elementor-image-box-content\"><h3 class=\"elementor-image-box-title\">Data Subject Rights<\/h3><p class=\"elementor-image-box-description\">Zycus has the provision to help the customers with privacy related questions and assist the customers when they have any query towards the security of personal information.<\/p><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-20 elementor-inner-column elementor-element elementor-element-39e7d8a\" data-id=\"39e7d8a\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap\">\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-c248d0d elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"c248d0d\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-b0f1ab7\" data-id=\"b0f1ab7\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-2757976 elementor-widget elementor-widget-heading\" data-id=\"2757976\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Personal Data Processing<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ab8449f elementor-widget elementor-widget-text-editor\" data-id=\"ab8449f\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t\t\t<ul class=\"sq-yellow\">\n<li>Zycus (a cloud solution provider) executes all the suitable terms of accountability and technology. This includes maintaining the records of all the activities being processed, assessments of the impact on privacy.<\/li>\n<li>\n&#8216;Zycus abides by the Data Processing addendum (DPA) as a significant part of the customer contract. These agreements incorporate data protection assurances to the customer by including standard contractual clauses included in the contract.<\/li>\n \t<li>Zycus employees are obligated to pass the data protection and privacy\/ security awareness trainings annually. These trainings will cover privacy principles and security topics.<\/li>\n \t<li>Zycus solutions are protecting the confidentiality, integrity and availability of their data and provide the above accountability continuously.<\/li>\n<\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Zycus and GDPR GDPR roles and definitions relating to Zycus: GDPR applies to both Controllers and Processors that are established in the EU and also to any Controller and Processor not located in the EU, where the processing activities are related to either the offering of goods or services to data subjects in the EU [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"site-sidebar-layout":"no-sidebar","site-content-layout":"page-builder","ast-site-content-layout":"full-width-container","site-content-style":"unboxed","site-sidebar-style":"unboxed","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"disabled","ast-breadcrumbs-content":"","ast-featured-img":"disabled","footer-sml-layout":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"default","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"class_list":["post-29972","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/dev.zycus.com\/freshz\/wp-json\/wp\/v2\/pages\/29972","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dev.zycus.com\/freshz\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/dev.zycus.com\/freshz\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/dev.zycus.com\/freshz\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dev.zycus.com\/freshz\/wp-json\/wp\/v2\/comments?post=29972"}],"version-history":[{"count":0,"href":"https:\/\/dev.zycus.com\/freshz\/wp-json\/wp\/v2\/pages\/29972\/revisions"}],"wp:attachment":[{"href":"https:\/\/dev.zycus.com\/freshz\/wp-json\/wp\/v2\/media?parent=29972"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}