SmartyFind

Datenverarbeitung

Prüfen Sie Rollen, Datenkategorien, Sicherheitsmaßnahmen und Verantwortlichkeiten der Datenverarbeitung.

01

1. Controller & Processor Roles (GDPR Art. 28)

For store catalog records and shopper search telemetry collected through the storefront widget, the Merchant acts as the Data Controller and SmartyFind acts as the Data Processor, processing data solely on the Merchant's documented instructions.

02

2. Technical & Organizational Security Measures (TOMs)

SmartyFind enforces TLS encryption in transit, encrypted connector secrets at rest, hashed scoped API keys, strict tenant_id and store_id isolation, role-based access control (RBAC), SSRF protection on feed imports and administrative audit logging.

03

3. Subprocessors & EU Data Residency

Primary application, search indexing and analytics infrastructure is hosted in European Union data centers. All infrastructure subprocessors are bound by GDPR-compliant data protection obligations.

04

4. Data Deletion & Return upon Termination

Upon Merchant request or subscription termination, SmartyFind permanently deletes all search indices, imported catalog items, credentials and analytics telemetry associated with the store within 30 days.