Jul 20, 2026retentionmedium
data sharing
Latest stance: third party or vendor sharing
“Prox relies on the following lawful bases: performance of a contract for customer-requested product processing; legitimate interests for security, reliability, usage and spend monitoring, and support; and consent for optional microphone dictation. Legitimate interests assessments have been completed for the processing carried out on that basis, including where we share personal data with third-party service providers. Processing is limited to what is necessary to deliver the product's stated functions, and Prox applies data minimisation by restricting collection to service-relevant data. Individuals' rights of access, rectification, erasure, restriction, portability, and objection are supported through the customer/controller relationship or directly through Prox where Prox is the controller. Prox relies on the published data processing addenda and standard contractual clauses of its subprocessors and is executing signed copies as part of its vendor management process.”Open citation