This English version is provided for information only. Only the French version is legally binding.
Data protection
Data Processing Agreement (DPA)
This agreement applies automatically when a company (the “customer”) uses Sensi+. It forms part of the General Terms and Conditions.
1. Roles
The customer is the controller of the data of its employees. Sensi+ acts as processor and processes such data solely to provide the service, in accordance with the customer’s instructions.
2. Data concerned
Employee accounts (name, e-mail address, role), training progress and results, and content entered by the customer (self-assessments, improvement plans, disaster recovery plans (DRP), IT charters).
3. Commitments of Sensi+
- To use the data solely for the service, never for any other purpose.
- To keep the data confidential and restrict access to it to the persons who need it.
- To protect the data through appropriate technical and organisational measures.
- To assist the customer in responding to requests from data subjects.
- To inform the customer without undue delay in the event of a data security breach.
4. Service providers and hosting location
The data is hosted in Switzerland by Infomaniak Network SA (Geneva), which provides hosting, backups and e-mail. The customer authorises Sensi+ to use technical service providers bound by equivalent obligations; the customer is informed in advance of any change of service provider or hosting location.
5. End of the contract
At the end of the subscription, the customer may request an export of its data. The data is then deleted no later than 90 days after the end, including from backups according to their normal cycle.
6. Audit
Upon reasonable request, Sensi+ provides the information necessary to demonstrate compliance with this agreement.