Do you have policies in place to address third party privacy obligations including limitations on disclosure and use of client Scoped Data?

Yes. QR Planet is fully GDPR complient. Data processing agreements defining scope, purpose and limitatios of data processing activities are established with third parties.

QR Planet conducts vendor risk assessments prior to entering into contractual relationships with vendors touching client Scoped Data, and third-party compliance with data protection obligations are regularly reviewed and audited by management and appropriate consultants.