GDPR Compliance

General information

This page provides information about how the EnterpriseAlumni service relates to the EU’s General Data Protection Regulation, or GDPR (GDPR – Official page, GDPR – Wikipedia page).

EnterpriseAlumni is a service of EnterpriseJungle, Inc., a Delaware corporation. EnterpriseJungle. may act as both the data controller and data processor under the GDPR (for more information about data controllers & data processors, please click here). Specifically, below please find a description of how you and your users’ personally identifiable information is handled when our services are used.

EnterpriseAlumni service infrastructure

The entire EnterpriseAlumni system infrastructure is hosted on one of 4 cloud platforms dependent on customer requirements. In certain instances, EnterpriseAlumni will deploy into the customer instance and in such case, EnterpriseAlumni will act as solely the data processor. In scenarios where EnterpriseAlumni acts as both the data controller and data processor, the instances are hosted in the Germany Region and propagated inside multiple availability zones.

SAP Cloud Platform
Microsoft Azure
IBM BlueMix
Oracle Cloud

The service has been built to scale and support a high number of concurrent sessions.

Security of the hosting facilities is managed directly by the respective vendor:

SAP Cloud Platform: https://www.sap.com/about/cloud-trust-center/data-center.html
Microsoft Azure: https://docs.microsoft.com/en-us/azure/security/azure-physical-security
IBM BlueMix: https://www.ibm.com/cloud/data-centers/
Oracle Cloud: https://www.oracle.com/webfolder/s/delivery_production/docs/FY16h1/doc35/2-Yuecel-Karabulut.pdf
Amazon: https://aws.amazon.com/security/).

EnterpriseJungle, Inc. – which provides the EnterpriseAlumni service – does not directly manage the infrastructure of the PaaS account, which is instead managed by the respective vendor. Everything from internal security policies to the account management as it relates to GDPR compliance can be found here: http://enterprisealumni.com/infosec-compliance/

EnterpriseAlumni (Free Trial)

How data is processed

When you use EntepriseAlumni during a “free” or “trial” – we process as Data Controller your email address and content when you use the platform or features. Additionally, we act as Data Processor when you use or generate any content that belongs to a third party. For example, we act as a Data Processor when you decide to “Refer A Job” or create an e-mail campaign or any other scenario there is a recipient or data field entry who is not you.

All personal data is handled according to this Privacy Policy and may be handled through the sub-processors listed here.

Data processing addendum

Since this is a free/trial service, we do not provide a Data Processing Addendum. When you use the platform features, we recommend that you do not use third-party data. That said, we will process such data in compliance with applicable laws and our Privacy Policy.

EnterpriseAlumni (Corporate Edition)

How data is processed

When you use EnterpriseAlumni Corporate Edition – we process as Data Controller your user’s names, email address, employment data, social information and any content they may create, submit within the application or be a recipient to, as well as the users IP address and associated analytics data. Additionally, we may process as Data Processor the following information:

  • additional users’ IP address
  • referral and application usage data
  • Name, email address and message content that belong to a third party. For example, when a user decides to refer or invite a colleague, or the third party user is a recipient of an email from an imported or otherwise transferred list and where the third party user has not currently opted into the application Privacy Policy.

All personal data is handled according to this Privacy Policy and may be handled through the sub-processors listed here.

Data processing addendum

If you are using EnterpriseAlumni and have agreed to the terms of service, you do not need to sign an additional Data Processing Addendum as our terms of service include a DPA. If you wish to have on file an executed DPA, you can download a signed Data Processing Agreement here.

Please note that we are not able to accommodate requests to sign a different Data Processing Addendum: our Data Processing Addendum should be sufficient in any relationship with EnterpriseJungle, Inc, provider of the EnterpriseAlumni service.

Frequently asked questions on our DPA

Do I need to separately sign a Data Processing Agreement?

No, you do not need to do so. As discussed above, the Terms of Use of EnterpriseAlumni include a Data Processing Agreement. We provide a pre-signed version of the same DPA for those that wish to have an executed copy of the Agreement for sharing it with stakeholders or for internal record keeping.

Can I send you a different Data Processing Agreement?

Unfortunately we are not able to review & sign your DPA. We have hundreds of customers and it would be impossible for us to do so. Our Data Processing Addendum should be sufficient in any relationship with EnterpriseJungle, Inc.