ABCDEFGHIJKLMN
1
INTERNAL STAKEHOLDERSYSTEMTYPE OF PERSONAL DATACOLLECTION OR SHARINGMEANS OF COLLECTION OR SHARINGSHARINGSALESSOURCE OF DATADATABASESTORAGETHIRD-PARTY DISCLOSUREGROUNDS FOR PROCESSING
3
Data Protection Officer "DPO"Mashgin Cloud (User Accounts)NameCollectionRegistration by Email, Mashgin Cloud Web ApplicationNoNoThird Party (Staff of Business Clients)Amazon Web Services "AWS"Deleted upon Client off-boarding or per Data Subject Access Request "DSAR"NoContractual Necessity
4
DPOMashgin Cloud (User Accounts)Email AddressCollectionRegistration by Email, Mashgin Cloud Web ApplicationNoNoThird Party (Staff of Business Clients)AWSDeleted upon Client off-boarding or per DSARNoContractual Necessity
5
DPOAll Mashgin SitesCookies (Functionality, Security) (per Cookie Table)Collectionmashgin.comNoNoConsumer, General PublicAWSper Cookie Tableper Cookie TableConsent
6
DPOAll Mashgin SitesCookies (Analytics) (per Cookie Table)Collectionmashgin.comNoNoConsumer, General PublicAWSper Cookie Tableper Cookie TableConsent
7
DPOPlane (Professional Employer Organization "PEO")Employment and Payroll Data (Date of Birth, Email, Physical Address, National Identity Number)CollectionRegistration and access by Mashgin staff through GDPR-compliant PEO and HRIS "Plane"NoNoInternal (E.U.-based staff)AWSIndefinitely as allowed by lawYes, with PEO "Plane"Consent
8
DPOHubspot (Customer Relationship Management "CRM")Basic Contact Information
Name, Email Address, Phone Number, Job Title

Cookies (Analytics) (per Cookie Table)
CollectionCorrespondence and other sales inquiries conducted via email

Cookies via mashgin.com
NoNoConsumer, General PublicAWSIndefinitely or as allowed by lawNoConsent
9
DPOServiceNow (CRM)Basic Contact Information
Name, Email Address, Phone Number
Collectionvia public Mashgin customer support channels such as e-mail or phoneNoNoConsumer, General PublicAWSIndefinitely or as allowed by lawNoContractual Necessity
10