GDPR FAQ

What is GDPR?

The EU General Data Protection Regulation (GDPR) replaces and unifies the existing privacy and security laws in Europe with a comprehensive EU-wide law that governs the sharing, use, transfer and processing of EU personal data. Narvar is committed to ensuring its own and its customer’s compliance with all applicable law (including GDPR).


Does Narvar process EU Personal Data?

Use of Narvar’s services may require Narvar to process EU personal data of our client’s consumers in order to provide our products and services (for example, processing email addresses or phone numbers for providing updates on package status).


Where is personal data processed and stored?

Personal data is processed and stored in the United States. Where EU personal data is transferred for Narvar’s processing, Narvar commits to having the appropriate data transfer mechanisms in place as required by GDPR, including Privacy Shield certification (Narvar’s Privacy Shield Certification) and/or EU model clauses.


Does Narvar have a Data Processing Addendum?

Absolutely! For customers where Narvar is a processor of EU personal data, we are happy to execute Narvar’s DPA which contains additional legal terms for GDPR and describes Narvar’s specific procedures for compliance. Narvar’s Data Processing Addendum is available upon request. To obtain a copy of our DPA please reach out to privacy@narvar.com.


Can Narvar assist my company with responding to an Individual Rights Request?

As a processor of personal data for our customers, we will assist our customers with responding to individual rights requests that they receive under the GDPR. All customers can contact their respective Customer Success Managers directly and consumers can contact Narvar via an email to privacy@narvar.com.  


How does Narvar secure data?

Narvar is committed to security. Narvar is SOC 2 Type II certified. Narvar’s Security team regularly reviews the security, availability, confidentiality, and integrity of data, as well as conformance to the information security policy. All personal data of customers and consumers is encrypted while in transit and while at rest. Additional information on Narvar’s security measures is available upon request from your customer service representative.


What security certifications does Narvar have?

Narvar is SOC2 Type 2 certified.