Is WorkAdventure GDPR compliant?
Yes. Personal data is processed under the GDPR (Regulation (EU) 2016/679) and the French Data Protection Act of 6 January 1978, as our terms of use state.
- Who is responsible for what. For your world, you are the data controller: you decide who can register, and what their data is used for and why. WorkAdventure is your data processor for everything it does on your instructions: hosting the world, storing the accounts, running the chat server, relaying video streams. For a few platform-wide activities that are our own decision (security, abuse prevention, infrastructure monitoring and platform analytics), WorkAdventure acts as an independent data controller.
- A Data Processing Agreement. Where WorkAdventure processes personal data on your behalf, a Data Processing Agreement forms part of the contract.
- Hosting in the EU. The platform and the data it stores for regular operation are hosted by OVHcloud in Gravelines, France. Our hosting providers and sub-processors are listed on our sub-processors page.
- A privacy notice for your users. Every world gets a privacy policy generated from its configuration, on every plan. Choosing the purposes for which you use your members’ and visitors’ data is a premium feature. See Configuring your privacy policy.
- Privacy by design. Audio and video are not recorded unless a user explicitly starts a recording, and WorkAdventure does not use or analyse the content of your communications.
The rights your users have under the GDPR, and how to exercise them, are described in our privacy policy.
