GDPR HQ

To meet the requirements of the General Data Protection Requirement (GDPR), we have modified our Privacy Policy and our Software Transaction Agreement, and we have created a data processing agreement that we call the SaaS Addendum. In general, the modifications

• explain the Personal Data we may collect
• enumerate the purposes for which Personal Data will be obtained
• indicate when and why Personal Data may be shared with third parties
• confirm that transfers of Personal Data, whether they are to our headquarters in the U.S.A. or to our third party affiliates, are being done in compliance with the expectations as described in the E.U. Model Clauses

For your convenience, listed below are links to materials often requested in relation to GDPR.

• Information Security Policy
• Privacy Policy
• SaaS Addendum
• Software Transaction Agreement
• Technical and Organizational Measures

Sub-Processors

Some of our products provide functionality through partnerships with other third parties. In the situations where the results of those efforts involve sharing Personal Data with a third party in the process of providing the functionality to you, we have listed the third parties in a list of sub-processors for that product. Many of our products do not have any sub-processors. To eliminate any confusion, a list of sub-processors has been created for each product. For those without any sub-processors, other than our corporate U.S. entity and affiliates as listed in the Software Transaction Agreement, the list is blank.

We have published lists of sub-processors associated with each of our products in our support portal (support.quest.com). Anyone registered for support can view the lists from https://support.quest.com/subprocessor.

Notifications

GDPR requires notifications in the case of a data breach and also if any change is made to a product’s use of sub-processors. By default, all users registered for and actively entitled to access to and maintenance of our products are opted-in to our data breach notification system. To receive notices of changes to sub-processors, or to opt-out of data breach notifications, please use the Manage My GDPR Notifications option in your product (available in our latest releases).

GDPR Readiness

Our latest releases have been carefully reviewed, and in some cases, modifications have been made to enhance our products’ readiness for GDPR. In the support portal, our customers entitled to support can see for which prior versions support is available and to which versions GDPR attention was specifically implemented.