Skip to main content

Inspera has Data Processing Agreements, compliant with GDPR as well as other national data protection and privacy regulations, for Inspera Assessment service.

 

What is a Data Processing Agreement?

 

A Data Processing Agreement (DPA) between the Data Controller (customer organisation) and the Data Processor (Inspera) regulates how personal data is defined and processed, also covering all data processing by Third Parties.

All hosting, storage and processing of personal data on Inspera Assessment adheres to the General Data Protection Regulation (EU 2016/679) (“GDPR”).

Data Processing Agreements also regulate sharing of personal data. With the exception of sub-processors outlined in the Data Processing Agreement, we don’t disclose personal data to third parties.

 

Inspera Assessment sub-processors

 

Sub-processor Purpose Personal data Processing location GDPR Transfer tool
Inspera AB
Kungsbro Strand 15b, 112 23,
Stockholm
Sweden
Subsidiary of Inspera
AS acting on its behalf
to provide service
delivery and customer
support.
All personal data as described in Annex I. EEA (Sweden)  n/a
Inspera ApS
Inge Lehmanns gade 10, 7.
8000 Aarhus C.
Denmark
Subsidiary of Inspera
AS acting on its behalf
to provide service
delivery and customer
support.
All personal data as described in Annex I. EEA (Denmark)  n/a
Inspera UK Ltd.
3rd Floor, 1 Ashley Road,
Altrincham, Cheshire, WA14
2DT
England
Subsidiary of Inspera
AS acting on its behalf
to provide service
delivery and customer
support.
All personal data as described in Annex I. UK Adequacy
Decision
Inspera Australia PTY Ltd.
Level 11 1 Margaret Street,
Sidney, NSW 2000
Australia
Subsidiary of Inspera
AS acting on its behalf
to provide service
delivery and customer
support.
All personal data as described in Annex I. Australia  Standard
Contractual
Clauses (SCCs)
Inspera USA, Inc.
1209 Orange Street, City of
Wilmington, County of New
Castle, 19801, State of
Delaware
USA
Subsidiary of Inspera
AS acting on its behalf
to provide service
delivery and customer
support.
All personal data as described in Annex I. USA  Standard
Contractual
Clauses (SCCs)
Kikora AS
Tjuvholmen allé 3,
0252 Oslo
Norway
Subsidiary of Inspera
AS processing pseudonymised test-taker data for statistical and analytical purposes.
All test-taker submission data in a pseudonymised form. EEA (Norway)  n/a
Platforma Akademia SH.P.K
Rruga Rexhep Mala, Nr. 28A
Prishtine
Republic of Kosovo
Subsidiary of Inspera
AS acting on its behalf
to provide service
delivery and customer
support.
All personal data as described in Annex I. EEA (Germany,
for storage)
Kosovo
 Standard
Contractual
Clauses (SCCs)
SA Tech Software India
Private Limited
Off. No. D-6030, 6th Floor, Sr.
No. 207, Solitaire Bus Hub,
Viman Nagar, Pune 411014
India
Provision of development services (software build and testing in non- productive environments) and support on potential live incidents. All personal data as described in Annex I. India  Standard
Contractual
Clauses (SCCs)
Tomi Ren EOOD
33 Shesti Septemvri Street, 6th
floor, Sofia 1000
Bulgaria
Provision of development services in terms of building and piloting a professional
2nd line Support Service.
All personal data as described in Annex I. Bulgaria  n/a
Amazon Web Services EMEA
SARL
38 Avenue John F. Kennedy
L-1855
Luxembourg
Contact Web Form
Hosting of infrastructure
(IaaS) and services
(SaaS) that Inspera
Assessment is based
on and provided
through.
All personal data stored in the Inspera Assessment solution. EEA (Luxembourg, Ireland, and
Germany) and USA
 Standard Contractual Clauses (SCCs) and EU-US Data Privacy Framework
TrackJS, Inc.
215 Pine Street West
Stillwater, MN 55082
USA
hello@trackjs.com
SaaS solution used to
troubleshoot client-side
errors of the test-player.
Inspera IP address
as proxy of the IP
address of the
candidate’s client
device.
USA  Standard
Contractual
Clauses (SCCs)
OverOps Inc.
5950 Hazeltine National Dr.
Suite 620, FL 32822
USA
hello@overops.com
SaaS solution used to
monitor and
troubleshoot the
Inspera Assessment
platform and solution.
Test-takers client IP address stored in backend logfiles of Inspera’s platform. USA  Standard
Contractual
Clauses (SCCs)
Zendesk Inc.
989 Market St
San Francisco, CA 94103
USA
Contact email
SaaS solution used for
service desk and
customer support.
Support tickets may
include personal data
about test takers
relevant for a support
case.
Any personal data
provided by the
Controller in service
tickets.
USA EU-US Data
Privacy
Framework
Atlassian PTY Ltd.
Level 6, 341 George Street,
Sydney, NSW 2000
Australia
Contact information
SaaS office productivity
suite used for internal
and external
communications and
collaboration.
Any personal data
provided by the
Controller for
provision of products
and services and
allow project
collaboration.
Australia and
USA
 Standard
Contractual
Clauses (SCCs)
and EU-US
Data Privacy
Framework
Google Cloud EMEA Limited
70 Sir John Rogerson’s Quay,
Dublin 2
Ireland
Contact page
SaaS office productivity
suite used for internal
and external
communications and
collaboration.
Any personal data
provided by the
Controller via email
or in document
format.
EEA (Ireland)
and USA
EU-US Data
Privacy
Framework
Microsoft Corporation
300 Deschutes Way SW STE
208 MC-CSC1, 98501,
Tumwater, US-WA
USA
Contact page
SaaS office productivity
suite used for internal
and external
communications and
collaboration.
Any personal data
provided by the
Controller via email
or in document
format.
EEA (Ireland)
and USA
EU-US Data
Privacy
Framework