4 ms·
IANAL but I think you still need to sign a data processing agreement with them and have your users confirm that they'll have access to their data.
by discordianfish 8y ago
IANAL but I think you still need to sign a data processing agreement with them and have your users confirm that they'll have access to their data.
- Grollicus 8y agoDoes Amazon do unreasonable things with your users' data? Because otherwise you wouldn't need consent.
- darrenkopp 8y agoThe terms are broad in GDPR, so you need the DPA just for Amazon to store it, as that's "processing". However, you don't need your users to confirm that, they agree to share the information with you (controller) and you'll have some sort of terms in your privacy policy allowing you to share personal information with 3rd parties you regularly interact with for legitimate purposes who will be bound by the terms set forth in your own privacy policy.