GDPR Compliance Policy

This policy explains how DeskGate supports GDPR-aligned deployments through its Self-Hosted / On-Premise architecture.

Deployment Model

Self-Hosted / On-Premise
Customer-owned infrastructure
No DeskGate data hosting
Full data ownership

GDPR Role

Customer = Data Controller
DeskGate = Software Provider
No processing decisions
No data access

Responsibility

Lawful processing
Transparency notices
Internal policies
Regulatory compliance

1. GDPR Roles

Customers act as Data Controllers and define the purposes and means of personal data processing. DeskGate provides software only and does not determine processing activities.

2. Data Processing Model

DeskGate does not host, collect, or centrally process personal data. All logs, sessions, and monitoring data remain within customer-controlled systems.

3. Data Subject Rights

DeskGate does not receive or manage data subject requests. Customers are fully responsible for handling access, rectification, erasure, and objection requests.

4. Lawful Use

Customers must establish lawful bases for processing, inform employees and users, and apply internal governance measures in line with GDPR requirements.

5. Security Measures

DeskGate includes configurable security features. Actual GDPR compliance depends on customer-defined technical and organizational safeguards.

6. Incident Handling

DeskGate does not monitor customer environments. Incident detection, notification, and reporting obligations remain entirely with the customer.

This GDPR Compliance Policy is provided for informational purposes only and does not constitute legal advice. Customers should perform their own legal assessments.

Confirmation