Drawing is Free - GDPR checklist


1	Service	Purpose	Privacy Policy	Location of Data Store	Legal Framework

2	Apple iCloud	storage of photographs, sync photos between phone and laptop, storage of documents in apps	https://www.apple.com/uk/legal/privacy/en-ww/	Globally, US data centres	EU SCC, UK SCC, APEC CBPR
3	Cargo	Website build and hosting, contact forms, hosting images	https://cargo.site/Privacy	Globally, US data centres	EU SCC
4	Dropbox	Storing documents, sharing documents, remote backup	https://www.dropbox.com/en_GB/privacy	Globally, US Servers, Locally on device	EU SCC, plus privacy shield
5	Eventbrite	Managing attendance at workshops	https://www.eventbrite.com/support/articles/en_US/Troubleshooting/eventbrite-privacy-policy?lg=en_US	Globally, US Servers	EU SCC, plus privacy shield, presigned clauses available. DPA for organisers
6	Facebook (Social)	Marketing, growing business network, communications	https://www.facebook.com/privacy/explanation/	Globally, US data centres	EU SCC + Adequacy
7	Google Drive	Storing and sharing documents and files, serving PDFs to website	https://policies.google.com/privacy	Globally, US Servers, Locally on device	DPST includes UK SCC
8	Google GMail	Email, communication	https://policies.google.com/privacy?hl=en&gl=ZZ	Globally, US data centres	Adequacy, EU SCC, UK SCC
9	Google	Search, various services like email, document creation and storage,	https://policies.google.com/privacy?hl=en&gl=ZZ	Globally, US data centres	Adequacy, EU SCC, UK SCC
10	Google Analytics	Capturing and analysing user behaviour on website	https://policies.google.com/privacy	Globally, US Servers	DPA
11	Google Workspace	Use of google drive, docs, forms, g-mail	https://policies.google.com/privacy?hl=en-US	Globally, US data centres	Adequacy, EU SCC, UK SCC
12	Hover	Domain Name services, Email	https://www.hover.com/privacy	Globally, Canadian Servers	?
13	Instagram (Social)	Marketing, growing business network, communications	https://help.instagram.com/519522125107875	Globally, US data centres	EU SCC + Adequacy
14	Issuu	Hosting PDFs	https://issuu.com/legal/privacy	Globally, Denmark	EU SCC, EU Company
15	LinkedIn (Social)	Marketing, growing business network, communications	https://www.linkedin.com/legal/privacy-policy	Globally, US data centres	EU SCC
16	LinkTree	Providing landing page for instagram links	https://linktr.ee/s/privacy/	Globally, Australia	?
17	Padlet	Sharing images of work, group messaging and comments from people on workshops	https://legal.padlet.com/privacy	Globally, US data centres	EU SCC, plus privacy shield
18	Patreon	Income generation, running membership benefits	https://privacy.patreon.com/policies	Globally, US data centres	EU SCC, plus privacy shield
19	PayPal	Accepting and sending payments	https://www.paypal.com/webapps/mpp/ua/privacy-full	Globally, US data centres	Binding Corporate Rules approved by competent Supervisory Authorities, EU SCC
20	Tiny Analytics	Checking popularity of website content, checking for technical problems, making decisions about website improvements. (Lightweight tracking only, does not set cookies)	https://tinyanalytics.io/privacy-policy	UK Servers, mentions international transfer in privacy notice	GDPR, DPA compliant, Adequacy
21	Twitter (Social)	Marketing, growing business network, communications	https://twitter.com/en/privacy	Globally, US data centres	EU SCC + Adequacy +Privacy Shield
22	Vimeo	Embedding and sharing video of workshops, communications	https://vimeo.com/privacy	Globally, US data centres	EU SCC
23	YouTube	Embeedding video of workshops in website	https://policies.google.com/privacy?hl=en-GB	Globally, US data centres	EU SCC
24	Zoom	Video conferences, running remote workshops	https://explore.zoom.us/en/privacy/	Globally, US Servers	EU SCC, plus DTIA