MMV has built specific features into the Service to help Customers meet their GDPR obligations. This article lists them.
Contractual framework
- Data Processing Addendum — the contract that formalizes MMV's role as a Processor, including Standard Contractual Clauses for EU/UK/Swiss data transfers.
- Sub-processor transparency — Appendix 1 of the DPA lists all sub-processors. Customers are notified before changes.
Security measures
- Encryption in transit (TLS) and at rest for customer data.
- Role-based access control at the application layer.
- Regular third-party security assessments.
- Documented backup and disaster recovery plan with routine restore testing. See Backup & Disaster Recovery.
Data subject support
- Data export — customer data can be exported through functionality within the Service, at any time during the subscription.
- Data deletion — MMV assists Customers with deletion of specific data subjects' records upon documented request.
- Breach notification — MMV will notify affected Customers within 72 hours of becoming aware of a personal-data breach.
Documentation
Was this article helpful?
Questions about this document?
Contact your MMV account manager or open a support ticket.