ANNEX A
DESCRIPTION OF THE DATA PROCESSING
I. RingCentral Office Plan Services
Nature and Purposes of Processing
RingCentral Office provides cloud-based communications and collaboration services for high-definition voice, video, SMS, messaging and collaboration, conferencing, online meetings, and fax (the “Services”). As part of the Services, RingCentral processes the Personal Data of the individuals who participate in these communications, including the Customer’s employees and authorized users and other third parties who are involved in communications taking place through the Customer’s use of the Services.
RingCentral processes the Personal Data for the purposes of providing and maintaining the Services to which the Customer has subscribed, for the purposes of customer relationship management, and customer support.
Categories of Data Subjects
- Customer’s employees and authorized users who use the Services in connection with the business of the Customer.
- Any other third party individuals who are involved in or referred to in the content of communications or collaborations taking place through the Customer’s use of the Services.
Type(s) of Personal Data Processed
The Personal Data transferred concerns the following categories of data:
- Identification information for Customer, contact information (address, telephone number (fixed and mobile), e-mail address, fax number), employment information (job title);
- Identification information for anyone who uses the Services at the request of and in connection with the business of the Customer (including telephone number (fixed and mobile) and email address);
- Any other Personal Data that the Customer, its authorized users or third parties involved in the communications choose to include in the content of the communications that are sent and received using the Services.
The Personal Data transferred to RingCentral for processing is determined and controlled by the Customer in its sole discretion. As such, RingCentral has no control over the nature, volume and sensitivity of Personal Data processed through its Services by the Customer or its users.
Special Categories of Data
RingCentral does not intentionally collect or process any special categories of data in the provision of its Services. Under the DPA, the Customer agrees not to provide special categories of data to RingCentral at any time.
Duration of Processing
The Personal Data will be processed for the term of the Agreement, or as otherwise required by law or agreed between the parties.
II. RingCentral Contact Center
Nature and Purposes of Processing
RingCentral Contact Center is an omni-channel customer communication management platform that unifies all customer-facing communication channels, including voice, email, SMS, website, mobile app, chat and social media communications, onto a single platform (the “Services”). As part of the Services, RingCentral processes the Personal Data of the individuals who participate in these communications, including the Customer’s employees and authorized users and other third parties who are involved in communications taking place through the Customer’s use of the Services.
RingCentral processes the Personal Data for the purposes of providing and maintaining the Services to which the Customer has subscribed, including any ancillary or related Services under the scope of the Agreement, for the purposes of publishing content on public/private communications channels, customer relationship management, user management, and customer support.
Categories of Data Subjects
- Customer’s employees and authorized users who use the Services in connection with the business of the Customer.
- Any other third-party individuals who are involved in or referred to in the content of communications taking place or otherwise managed through the Services.
Types of Personal Data Processed
The Personal Data transferred can be classified in the following categories:
- Identification information for Customer as well as End Users such as full name, gender, contact information (address, telephone number (fixed and mobile), e-mail address, fax number), employment information (job title) and company name;
- Identification information for anyone who uses the Services at the request of and in connection with the business of the Customer (including telephone number (fixed and mobile) and email address);
- Any other Personal Data that the Customer’s users or individuals involved in the communications choose to include in the content of the communications that take place or are otherwise managed using the Services;
The Personal Data transferred to RingCentral for processing is determined and controlled by the Customer in its sole discretion. As such, RingCentral has no control over the nature, volume and sensitivity of Personal Data processed through its Services by the Customer or its users.
Special Categories of Data
RingCentral does not intentionally collect or process any special categories of data in the provision of its Services. Under the DPA, the Customer agrees not to provide special categories of data to RingCentral at any time.
III. RingCentral Engage Digital
Nature and Purposes of Processing
RingCentral Engage Digital is an omni-channel digital customer communication management platform that unifies all customer-facing communication channels, including email, SMS, website, mobile app, chat and social media communications, onto a single platform (the “Services”). RingCentral Engage Digital publishes authorized users’ content onto the public or private communication channels connected to their platform and synchronizes end user content from the same channels. RingCentral Engage Digital stores and displays Customer information and conversations history to the authorized users. Authorized users are identified, have accesses and permissions defined by authorized users with administrator roles and all their actions are logged into an application journal.
RingCentral processes the Personal Data for the purposes of providing and maintaining the Services to which the Customer has subscribed, including any ancillary or related Services under the scope of the Agreement, for the purposes of publishing content on public/private communications channels, customer relationship management, user management, and customer support.
Categories of Data Subjects
- Customer’s employees and authorized users who use the Services in connection with the business of the Customer.
- Any other third-party individuals who are involved in or referred to in the content of communications taking place or otherwise managed through the Services.
Types of Personal Data Processed
The Personal Data transferred can be classified in the following categories:
- Identification information for Customer, full name, gender, contact information (address, telephone number (fixed and mobile), e-mail address, fax number), employment information (job title) and company name;
- Identification information for anyone who uses the Services at the request of and in connection with the business of the Customer (including telephone number (fixed and mobile) and email address);
- Content published on communication channels connected to the Services, including public information on social media channels connected to the Service;
- Any other Personal Data that the Customer’s users or individuals involved in the communications choose to include in the content of the communications that take place or are otherwise managed using the Services;
The Personal Data transferred to RingCentral for processing is determined and controlled by the Customer in its sole discretion. As such, RingCentral has no control over the nature, volume and sensitivity of Personal Data processed through its Services by the Customer or its users.
Special Categories of Data
RingCentral does not intentionally collect or process any special categories of data in the provision of its Services. Under the DPA, the Customer agrees not to provide special categories of data to RingCentral at any time.
Duration of Processing
The data retention duration (between 1 day and 2 years) is defined by the Customer, based on the Customer’s needs and context, and can be configured on the Services by the Customer’s Users or by RingCentral.
IV. RingCentral Engage Communities
Nature and Purposes of Processing
RingCentral Engage Communities is an online community management platform enabling community responses to customer service inquiries (the “Services”). Community administrators manage all different aspects of the platform regarding the registered community members: they can create, edit and give specific permissions and roles to the community members. The Community administrators also manage the community members’ contents creation, restriction, moderation, publishing, and edition.
RingCentral processes the Personal Data for the purposes of providing and maintaining the Services to which the Customer has subscribed, including any ancillary or related Services under the scope of the Agreement, for the purposes of the online platform management, customer relationship management, and customer support.
Categories of Data Subjects
- Customer’s employees or authorized users;
- Any other third-party individuals who are contributors to the online sharing space.
Types of Personal Data Processed
The Personal Data transferred can be classified in the following categories:
- Identification information of Customer’s employees or authorized users or other third-party contributors, including name and e-mail address;
- Content published on the online sharing space, including any public posts and private messages;
- Any other Personal Data that the Customer’s users or third-party contributors choose to include in content posted, sent or received using the Service.
Special Categories of Data
RingCentral does not intentionally collect or process any special categories of data in the provision of its Services. Under the DPA, the Customer agrees not to provide special categories of data, sensitive categories of data or data regarding minors to RingCentral at any time.
Duration of Processing
The data retention duration (between 1 day to 2 years since the last user action) is defined by the Customer, based on the Customer’s needs and context, and can be configured on the Services. Content can also be deleted by administrators and moderators of RingCentral Engage Communities or by RingCentral.
ANNEX B
LIST OF RINGCENTRAL SERVICES COVERED BY DPA
- RingCentral Office Plan Services
- RC Contact Center
- RingCentral Engage Digital
- RingCentral Engage Communities