Data Protection and GDPR at awork

Data Protection at awork

Protecting your personal data is really important to us at awork.
We process data exclusively in line with the EU General Data Protection Regulation (GDPR) and according to clearly defined legal and organizational requirements.

Roles & Responsibilities

awork processes personal data in clearly defined roles:

• awork acts as a data processor according to Article 28 GDPR for your customer data.
• You as our customers remain the data controller for the content and personal data you process in awork.
• Data protection related decisions and processes are organizationally anchored and documented.

Hosting & Data Processing

• awork platform hosting exclusively in Germany
• Your own dedicated tenant at Microsoft Azure Germany, controlled exclusively by awork
• Primary data processing within the European Union
• In selected cases, data transfers to third countries can occur, for example as part of support or communication services
• In these cases, data transfers only happen on the basis of appropriate safeguards, particularly:
  • EU Standard Contractual Clauses (SCCs)
  • Adequacy decisions by the European Commission (where applicable)

Sub-processors

• awork uses sub-processors exclusively for operating the platform as well as for support and service offerings.
• Sub-processors only get access to personal data when it's absolutely necessary for the specific purpose.
• Access is limited to clearly defined, selected use cases.
• We carefully select all sub-processors, bind them contractually, and check them regularly.
• We provide you with a current overview of all sub-processors transparently.

Data Protection Organization

• External Data Protection Officer: PROLIANCE GmbH, Munich
• Established data protection policies and processes
• Regular training and awareness raising for employees
• Defined processes for data protection requests and data subject rights

Contracts & Documents

• Data Processing Agreement (DPA) according to Article 28 GDPR
• Privacy Policy
• Sub-processor List

Transparency & Contact

If you have any further questions about data protection, need GDPR information, or want to discuss individual cases, we're happy to help.

📧 privacy@awork.com