What is the GDPR?
The General Data Protection Regulation (GDPR) is a European regulation on data protection and privacy. It also addresses the export of personal data outside the EU. The GDPR aims primarily to give control to citizens and residents over their personal data and to simplify the regulatory environment for international business by unifying the regulation within the EU.
Who does it apply to?
The GDPR applies to any individual or entity based in the EU, and to all individuals or entities that process personal data of EU individuals. The GDPR define personal data as any information relating to an identified or identifiable individual. It includes data such as names and contact details, as well as anything that can be used to identify a person.
Does the GDPR apply to individual Paperspace customers?
Yes, if the customer is based in the EU or using Paperspace to process the data of EU individuals.
Is Paperspace a data processor or data controller?
Both, depending on how you're using Paperspace. If you are using Paperspace and handling or collecting personal and/or identifying data belonging to EU individuals, Paperspace is a data controller. Otherwise, Paperspace is a data processor in that we use limited personal data for business purposes of maintaining your account. This information is not shared with a third party outside of delivery of services (correspondence, support, billing, etc.).
How is Paperspace complying with the GDPR?
Paperspace is taking steps to make our data use more clear and working to adopt all guidelines set out by the GDPR. As a data processor, we already collect the minimum amount of personal information from our users. We comply with any deletion requests of Paperspace customers' data including virtual machines and Gradient files.
As a data controller, we strongly encourage our users in the EU and/or handling personal data of EU individuals to comply with best practices, including the GDPR.
We are updating our terms of service to demonstrate our commitment to upholding the regulations outlined in the GDPR.
How does Paperspace handle deletion requests from customers?
Customers have the ability to remove data they have uploaded to our products, and delete them entirely. Customers may also deactivate their Paperspace accounts. You may request that all personal data that has been collected be permanently deleted by submitting a support ticket.