Skip to main content
Data Security and Reliability

Privacy, GDPR, DPA, and Subprocessors

Data ownership, GDPR responsibilities, the DPA, subprocessors, and data subject requests.

Last updated 13 days ago

Hanna processes customer data to provide the service, follows GDPR requirements, and publishes the main privacy and data processing documents.

Data ownership and use

Customers retain ownership of the data they upload to Hanna. Hanna does not resell customer data or use it for purposes unrelated to service delivery. Customers can export their data and, subject to contractual and legal requirements, initiate its deletion.

When an organisation uses Hanna to manage data about customers, employees, or partners, it normally decides what data is processed and why. The organisation is responsible for its lawful basis, notices, retention rules, and employee access. Hanna applies platform safeguards and the agreed processing measures.

Data Processing Agreement

The Data Processing Agreement (DPA) defines the parties' roles, the subject of processing, security measures, and other GDPR terms. If your organisation requires a DPA, use the current document linked from the Hanna Trust and Reliability page or contact Hanna Customer Support.

Before signing or reviewing a document, confirm that you have the latest version. Your organisation's responsible person or legal counsel should assess organisation-specific legal questions.

Subprocessors

Subprocessors are service providers that help Hanna deliver the service and may process data on Hanna's behalf. The current list is published on the Hanna Trust and Reliability page. Consider each provider's purpose, data location, and safeguards during your review.

Data subject requests

If a person asks to access, correct, or erase their data, first determine whether your organisation is the controller. Your administrator should identify relevant Hanna records and perform available actions. If Hanna's assistance is required, provide enough information to identify the request without sending unnecessary personal data or secrets.

Official documents

Was this helpful?

Still need help? Ask the team