Data Processing Policy
This page describes the intended data-processing relationship for organisations using HACKTIX. A detailed Data Processing Agreement should be executed where required.
Customer instructions
HACKTIX processes event and participant information to provide the services configured by the organisation, subject to documented instructions and applicable law.
Confidentiality and security
Access should be limited to personnel and service providers who need it to operate, secure or support the service and who are subject to appropriate confidentiality obligations.
Sub-processors and transfers
The final agreement must identify hosting, email, security and other sub-processors, including locations and applicable transfer safeguards.
Assistance, incidents and deletion
The final agreement must set out assistance with data-subject requests, security incidents, audits and return or deletion of data when services end.