Phrase GmbH

Germany

In the design and purchasing decision of IT systems, deletion by design should be considered with automatic removal before the deletion deadline after the start of the retention period. Service owners must document the deletion cycles of used systems for the affected types of information stored and ensure effective measures to fulfill manual deletion requests, e.g. in the case of a GDPR deletion request, are in place (e.g. through a valid data processing addendum ensuring the mechanism).

Any personal data which we collect, process and store will only ever be kept by us for as long as there is a specific purpose for such storage. Your data will be erased or its processing will be restricted as soon as the specific purpose for which they were stored no longer applies or they are not subject to contractual or legal retention obligations. It is possible, however, that European regulations, applicable national laws or other rules may require us to store data which we have processed for a longer period of time. We will erase or restrict the processing of your data when these statutory data retention periods have expired.

Data is being stored with AWS servers in Ireland, Germany, and the United States. Any personal data which we collect, process and store will only ever be kept by us for as long as there is a specific purpose for such storage. Your data will be erased or its processing will be restricted as soon as the specific purpose for which they were stored no longer applies or they are not subject to contractual or legal retention obligations. It is possible, however, that European regulations, applicable national laws or other rules may require us to store data which we have processed for a longer period of time. We will erase or restrict the processing of your data when these statutory data retention periods have expired.

Germany, Ireland, United States

Cloud-hosted

AWS

yes

Right to erasure - In certain circumstances you have the right to obtain that Phrase erase personal data concerning you without undue delay. The right to erasure does not apply if processing is necessary. The request for deletion needs to be in written form via email to privacy@phrase.com.

no

2021-11-30

yes

Okta, OneLogin, G Suite

yes

yes

privacy@phrase.com

no

yes

no

no