Customer acts as Data Controller. Zomeet acts as Data Processor.
Processing limited to providing, securing, and improving the service.
Encryption in transit, least-privilege access, audit logging, and monitoring.
Assistance with data subject requests and incident response.
“Personal Data,” “Controller,” and “Processor” have the meanings given in applicable data protection laws. “Services” refers to Zomeet’s hosted meeting and remote control platform.
Zomeet will process Personal Data only on documented instructions from the Customer, including configuration and usage of the Services, unless required by law.
Zomeet ensures that authorized personnel and contractors are bound by confidentiality obligations and access Personal Data only as necessary.
We maintain technical and organizational measures appropriate to the risk, including:
Zomeet may engage subprocessors to provide infrastructure and support services. A current list is available upon request via [email protected].
Zomeet will assist Customers in responding to requests for access, deletion, and export, using available product tools and support channels.
We will notify Customers without undue delay after becoming aware of a personal data breach and provide relevant information to support compliance obligations.
Retention periods are defined in the Data Retention Policy. Customers may request tenant-specific overrides in accordance with that policy.
Where cross-border transfers occur, Zomeet relies on appropriate transfer mechanisms consistent with applicable law.
Questions about this DPA can be sent to [email protected].