Accountor's Roles (GDPR)
Accountor plays different roles depending on the context of processing of personal data.
Accountor As a Service Provider
Data processor is a party processing personal data on behalf of other organisation. As a service provider, we usually process personal data on behalf of our customers in the role of a data processor, e.g. when providing
- payroll services
- accounting services
- hosted IT-services
When provide software and in these cases, the customer using the software is the controller and decide the means and purposes of the processing. In addition, we are a processor when we provide cloud services (SaaS) or other hosted IT services to our customers and sometimes when we provide consulting services.
However, when providing services Accountor does not only act as a data processor but also as a data controller. In such cases, we process personal data of our customer’s representatives, decision makers and other contact persons for example to
- Ensure the provision of services
- Manage and control our relationship with the customer
- To market our services
Consequently, in these cases we are responsible for the lawfulness of the processing.
Accountor As an Employer
Naturally, we process personal data of our employees in the employment relation. In such case, Accountor is a data controller who is responsible for the lawfulness of the processing no matter whether the processing is carried out internally or externally by the data processor. The same applies to leased employees.
In addition, Accountor may acquire some services for its employees that are closely related to the employment relation and personal data are processed therein. For example, when Accountor acquires occupational health care services. Accountor is not a data controller nor a data processor. Accountor just takes care of the expenses as part of the employment relation but does not have the right to control or decide on the personal data.