DOTGOMM LTD, acts as a processor when providing services to our customers who are either data controllers or processors. We only process personal data on documented instructions and in accordance with a Data Processing Agreement (DPA).
 We act as data controller for Basic Personal Data, Location Data, Employment-Related Data, and Communication Data of our direct customers for use in our internal CRM.
            Location: Canada (GDPR Adequate Country)
            Type of Service: Development, Infrastructure, and Support
            Data Categories: Basic Personal Data, Location Data, Employment-Related Data, Fincancial Data, Communication Data, Identifiers / Digital Data
            Safeguards: Data is encrypted in transit using industry-standard encryption protocols, such as SSL. Only authenticated and authorized systems and personnel can initiate or receive data transfers
          
            Location: South Africa (Non-Adequate Country)
            Type of Service: Customer Support
            Data Categories: Basic Personal Data, Location Data, Employment-Related Data, Fincancial Data, Communication Data
            Safeguards: Bound by IDTA (International Data Transfer Agreements), data minimization
          
            Location: South Africa (Non-Adequate Country)
            Type of Service: Customer Support
            Data Categories: Basic Personal Data, Location Data, Employment-Related Data, Fincancial Data, Communication Data
            Safeguards: Bound by IDTA (International Data Transfer Agreements), data minimization
          
            Location: South Africa (Non-Adequate Country)
            Type of Service: Customer Support
            Data Categories: Basic Personal Data, Location Data, Employment-Related Data, Fincancial Data, Communication Data
            Safeguards: Bound by IDTA (International Data Transfer Agreements), data minimization
          
We implement appropriate technical and organizational measures including encryption, access controls, and regular audits. All sub-processors are contractually bound to maintain confidentiality and comply with GDPR obligations.
Where personal data is transferred outside the EEA to countries without adequacy decisions, we use IDTA's (International Data Transfer Agreements) and implement additional safeguards where necessary.
If you have any questions about our GDPR compliance or sub-processors, contact our Data Protection Officer:
Email: nigel@dotgomm.co.uk