The data storage and business logic of our software solutions are performed at Amazon Web Services (AWS) in Frankfurt am Main, Germany. Consequently, personal data processing takes place exclusively in the EU or Germany and such data will always remain within the European Union. We have concluded all contracts required for the GDPR with AWS as a subcontractor; furthermore, our hosting provider is ISO-certified.

No, your customer data and the contacts you record will not be shared with other companies or used to create a contact database. All contact data you record is accessible only to your company.

In general, contacts captured by our customers are not stored long-term in snapADDY solutions but are exported to a CRM system (or Excel, etc.) after being processed. Once the data has been deleted from the snapADDY software, it is permanently deleted from our systems after the backup deadlines expire.

As an administrator, you can set in the snapADDY software that all recorded data is automatically deleted from snapADDY DataQuality after being exported.

Besides the Order Processing Agreement, there are technical and organisational measures (TOMs) to ensure data security. These measures meet the standards required by the GDPR.

You can download an overview of our TOMs here:

We use the cloud hosting provider Amazon Web Services (AWS) as a subcontractor for deploying our products and Google's Cloud Vision service for the text recognition (OCR) of business cards.

You can find a full list of subcontractors in our Order Processing Agreement:

Order Processing Agreement

The use of snapADDY software does not change your current procedures and requirements for creating new contacts or leads in your CRM or other systems. Only the previously manual creation of a new contact will be partially automated.

Of course, your staff and CRM users must comply with applicable law when using the software and, if necessary, obtain the consent of the individuals being processed.

For example, if there is a current business opportunity and your staff creates a lead in the CRM system for legitimate interest, then snapADDY only automatizes this manual step. If your staff store any contact data in the CRM without the consent of the concerned person, this action would not be GDPR compliant, regardless of whether snapADDY software is used or not.

By generating updated suggestions for contacts based on sources available to you or public sources (business cards, email signatures, business networks), the principles of the GDPR (e.g., the principle of accuracy of stored data) are also positively applied.

Since snapADDY solutions process personal data, you must conclude an Order Processing Agreement with snapADDY according to Art. 28 of the GDPR.

All important rights and obligations for you as a client and us as a contractor are specified in this agreement. Please use our sample agreement for this purpose, sign it and send it back to legal@snapaddy.com.

Individual Order Processing Agreement

It is also possible to fill in and sign a customized order processing form that you have created. However, we will have to charge you for the cost of legal review of your documents.

When data is transferred to a third country, comprehensive data protection measures must be taken, such as the conclusion of standard contractual clauses and the performance of a data transfer impact assessment to check whether data processing in the third country is permissible. In the case of data processing in the USA, there is the "Data Privacy Framework" adequacy decision, which applies if a service provider is certified under this. At snapADDY, we use the hosting provider Amazon Web Services (AWS) to store data. All data is processed in a data center in Frankfurt am Main and therefore does not leave the European Union.

snapADDY's solutions do not create a copy of the data in your CRM system but are based on bidirectional interfaces that retrieve the information required for the respective action directly from your CRM system. For example, this includes the automatic duplicate check that searches in real-time for possible duplicates of a contact in your CRM system.

We assigned the SiDIT GmbH as external data protection representative. This is the contact information:

SiDIT GmbH
Phone: +49 931 78 08 77 0
Email: legal@snapaddy.com