EasyLife 365 Identity - Privacy Policy

1. Scope

We, EasyLife 365 AG (Zugerstrasse 32, 6340 Baar, Switzerland), are the owner and operator of the software EasyLife 365 Identity (hereinafter referred to as the "Software"). For the data processing activities listed in this privacy policy we act as processor on behalf of our customers, who are the controllers. Our own processing as controller (for example contract, invoicing and support data) is described in the General Privacy Policy.

This product specific Privacy Policy supplements and extends the General Privacy Policy of EasyLife 365 AG. These documents create a comprehensive agreement for the use of EasyLife 365 Identity (“Product”), detailing specific terms that apply exclusively to EasyLife 365 Identity and take precedence in cases where provisions differ from those in the General Privacy Policy.

2. Data processing when using our Product

The proper use of our Software requires processing the data subjects’ data listed in The General Privacy Policy section “Users and other data subjects”. The data processed in this context includes the following categories. When processing this data, we act as a processor on behalf of our customers, the controllers.

2.1 Data directly related to our Software

• 1. data related to the implementation of the Software, e.g.:
  • a. Granting / restriction of permissions
  • b. Update of the Software
• 2. data related to the use of the Software, e.g.:
  • a. Configuration data, e.g.:
    • Creation, design, and modification of policies (including metadata such as title or description)
    • Settings, any options that the customer configures in the software’s admin center
    • Management of tasks and configurations related to applications and their owners
  • b. User profile and contact data, e.g.:
    • Name
    • Email address
  • c. Backup of the data under section 2.a and 2.b.

This data is generated automatically when you use the Software and is technically necessary for the operation. Any further processing is carried out to provide the desired functionalities of the Software. The types of processing of this data (e.g., sending notifications, deletion of resources, etc.) are determined by the functionalities of the Software as described in the respective documentation, in particular, available at https://docs.easylife365.cloud/.

The data under point 2.a, and the data under point 2.b that is stored with it, will be stored by us for as long as the customer does not delete the configuration or until it is deleted after the license has ended. The data under point 2.b in the application Logs will be stored for 90 days to provide support, in particular, to fix errors. The data under point 2.c will be stored for 180 days.

We process this data only on the documented instructions of our customer under the Data Processing Agreement. The customer, as controller, determines the legal basis.

2.2 Data related to your Microsoft 365 environment and tools

In order for our Software to fulfil its purpose and assist you in the governance of your app identities, access and further processing of data contained in your Microsoft environment is required. The data in question are related to the following areas:

• all data with regard to App Registrations and Enterprise Applications (e.g., name, properties, credentials (without secret values), permissions, last activity)
• the owners of these applications (e.g., name, e-mail address)

We only access and process this data to perform the actions you request and ultimately to provide the functionalities of our Software. We process this data only on the documented instructions of our customer under the Data Processing Agreement. The customer, as controller, determines the legal basis.

3. Annexes

Integral parts of this Agreement are the following appendixes:

• Appendix 1: General Privacy Policy
• Appendix 2: Data Processing Agreement

Information on data subject rights and international transfers is in the General Privacy Policy, and information on subprocessors is in the Data Processing Agreement and on our subprocessor page. For data we process as processor, requests from data subjects are forwarded to the customer.

These Documents in its latest Version are available at: https://www.easylife365.cloud/legal/identity/privacy