Last Modified: May 22nd, 2018
in 2016, Europe adopted a new set of data protection laws called the General Data Protection Regulation (GDPR).
These laws are meant to protect personal data of EU citizens and have been in effect since May 25th, 2018.
We take data security very seriously and have worked to ensure GDPR compliance by the enforcement date.
This page outlines that compliance and provides more details to ensure you are following compliance regulations for your own applications and data.
The European Commission approved and adopted the new General Data Protection Regulation (GDPR) in 2016.
This regulation aims to give EU-citizens more control over their data, and create uniform privacy rules to enforce across the EU. This will be replacing the EU Data Protection Directive as well as local laws relating to it.
Although this law originates in the EU the reach of these regulations is global. Any business holding personal data on customers, prospects, or employees based within the EU are subject to the new regulations.
The GDPR defines “personal data” as any information related to a natural person or ‘Data Subject’ that can be used to directly or indirectly identify the person.
Yes. We’ve long maintained data centers in Europe to ensure data for our European customers is not leaving the EU. We can confirm that all Knack accounts which house data in these EU data centers comply with the GDPR as of May 25th, 2018.
To further comply with the GDPR we've worked on implementing the following:
We’ve added a new feature that will enable you to easily and completely delete all data linked to an individual user.
More information on this can be found here.
We’ve created a new Data Processing Agreement (DPA) that explains the privacy considerations in place and our terms for meeting GDPR compliance.
If you are a current Knack customer who would like to enter into a DPA with us, you can do so by navigating to your App Settings. At the top, navigate to the Info tab and you'll see a link to View & Sign under the section: Agreements.
You'll need to download, review, and sign the agreement. You can then return it back to us by sending to: email@example.com
We have appointed a Data Protection Officer to oversee and maintain policies as they relate with data management.
To contact the Data Protection Officer at any time, please reach out to firstname.lastname@example.org
We’ve also augmented our team training to accommodate needs associated with GDPR.
We have already self-certified under the E.U.-U.S. Privacy Shield to ensure that all transferring of personal data is compliant.
As such, we currently maintain data centers within the European Union - specifically, Frankfurt, Germany.
All of the data for these EU apps are completely isolated to these servers, including the jobs and backups, to ensure no data ever leaves the EU. This data is 100% encrypted both in transit and at rest.
If you are unsure if your data is currently housed in our EU data center, you can check within your App Settings to confirm. At the top, navigate to the Info tab and you'll see where your data is hosted under the section: Data Location.
The short answer here is yes. Although we can make sure information we collect and store is compliant, the act you take in acquiring information from your own users may require additional steps to be compliant.
Some steps you can take are: