We may process the personal data we collect for the purposes described in our Privacy Policy, and thereby act as data processor for those limited purposes.
We act only as a, in GDPR terms, data processor, as regards the processing of your information for the purpose of providing the services subscribed by your company.

Your company is, in GDPR terms, the data controller.

A data controller is: “a natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of processing of personal data.”

Data processors process personal data on behalf of the controller.

We never sell your personal information to third parties.
We store all personal information in Europe.
We make sure your data is stored with the highest security standards.

In that capacity and within the scope of the services, your company is responsible in particular for:

making any declarations necessary to the relevant data protection authority
complying with its obligations as data owner under all applicable laws and regulations
ensuring you have the authority to use the personal data collected in accordance with the defined purposes and refraining from any unauthorized use.