Data processing addendum

Roles

The city is the controller (or “business”) of resident data; CSP is the processor (or “service provider”), acting on the city’s documented instructions.

What the DPA covers

• Purpose: providing, securing and supporting Sentra 311
• Categories of data: resident contact details, request content and photos, staff accounts, chat transcripts, optional worker locations
• Subprocessors: listed on the subprocessors page, with notice of changes
• Security measures: see security
• Breach notification: without undue delay, within the time set in the customer agreement and applicable law
• Deletion or return of data at the end of the contract
• Assistance with resident rights requests
• Audit information on request

Request the DPA

The full DPA is available for signature on request: contact us or email [email protected].