INAP IS NOW HORIZONIQ.
Click here to LEARN more.
Internap Holding LLC (“HorizonIQ”), together with its domestic and foreign subsidiaries (collectively, “HorizonIQ”), provides high-performance data center services including colocation, managed hosting, cloud, and network services across a global network of data centers and POP locations. HorizonIQ customers may use HorizonIQ services to store, transmit, encrypt, decrypt, modify, process and otherwise manipulate or transmit data. In most cases, HorizonIQ does not directly control how its services and infrastructure are utilized and what information is stored on or transmitted through such infrastructure.
Certain of this data may constitute protected “personal data” as defined in the E.U. General Data Protection Regulation (“GDPR”). In addition, certain of the HorizonIQ Services may constitute “processing” as defined in GDPR. As such, GDPR may apply to HorizonIQ in certain circumstances, depending on the services provided and data stored.
The following disclosures concerning HorizonIQ’s compliance with GDPR are presented for informational and compliance purposes only. Nothing in these disclosures constitutes a representation that any particular data or service is governed or subject to GDPR, nor do these disclosures represent or constitute any contract or undertaking with any customer or prospective customer.
GDPR became effective on May 25, 2018. On and after that date, HorizonIQ complies with GDPR to the extent applicable.
Under GDPR, HorizonIQ may be designated as (i) a “processor” subject to GDPR with respect to certain data sets; (ii) a “controller” subject to GDPR with respect to certain data sets; or (iii) not subject to GDPR for certain data sets.
If GDPR applies, in most cases, HorizonIQ will be a “processor.” This means that HorizonIQ will store or perform some other set of operations on a data set that contains “personal data” for a customer, at the customer’s written direction.
Example: HorizonIQ provides managed services hosting to Customer A, a retailer based in France. This customer stores shoppers’ names, birthdates, email addresses and credit card information and many of these shoppers are EU citizens. Customer A is a “controller” of the shopper data. In connection with the managed services hosting, HorizonIQ has logical access to the shopper data, and therefore, HorizonIQ is a “processor” of the shopper data. HorizonIQ processes data for Customer A pursuant to a data processor agreement.
HorizonIQ also collects and stores contract information, payment information, employee records, and other information for the purposes of conducting business, marketing, employment, and more. In these cases, HorizonIQ is a controller of data.
Example: HorizonIQ enters into a contractual agreement with Customer B concerning the use of colocation space. Customer B is based in the E.U. HorizonIQ receives personal information regarding employees of Customer B during negotiations, including the employees’ work email addresses. HorizonIQ is a “controller” of this data.
For other relationships, GDPR will not apply, either because the data does not constitute protected data, or because the customer is not subject to GDPR.
Example: A US-based customer purchases managed hosting services for marketing data concerning US citizens. GDPR does not apply.
Example: An EU-based customer purchases colocation services from HorizonIQ. HorizonIQ does not have logical access to any customer data. HorizonIQ does not have logins, passwords, or any other data, and cannot access the server. HorizonIQ provides only physical security of the actual machine storing the data. HorizonIQ is not a data processor because HorizonIQ does not perform any operation on the customer’s data. It is not necessary to execute a processor agreement with HorizonIQ under GDPR.
Example: An EU-based customer purchases network services from HorizonIQ. HorizonIQ does not have logical access to any customer data in connection with network services. It is not necessary to execute a processor agreement with HorizonIQ under GDPR, because HorizonIQ is acting as a “mere conduit” of the data and is not considered a processor of the data.
Security: HorizonIQ implements standard up-to-date security measures to secure the environment and connections through which HorizonIQ provides its services. HorizonIQ can deliver additional and/or alternative measures upon customer’s request.
Disclosure: HorizonIQ will not disclose any information to any third party unless authorized by law, or authorized by either the data subject, controller, or processor as the case may be.
If HorizonIQ is a “processor” under GDPR for a particular data set, HorizonIQ will enter into a processor agreement or data processor addendum. This agreement is required by GDPR and governs the terms of HorizonIQ’s processing of the protected data at issue.
If HorizonIQ is a “controller” under GDPR, HorizonIQ will comply with applicable GDPR obligations. These include, but are not limited to the following:
To ensure GDPR Compliance, HorizonIQ undertakes the following:
HorizonIQ uses certain processors and subprocessors to assist it in providing HorizonIQ Services. These processors and subprocessors may process personal data. A list of current HorizonIQ processors and subprocessors is available here.
As set forth above, in certain instances HorizonIQ will act as a controller under GDPR. Article 13 and 14 of GDPR require HorizonIQ to provide certain information to data subjects when collecting their personal data directly from them or from third parties (such as an employer).
This summary is for informational purposes only and is qualified in its entirety by applicable privacy policies and terms of use provided elsewhere on this website and by HorizonIQ affiliates. In the event of conflict, the terms of the applicable privacy policy or terms of use shall govern.
HorizonIQ and/or any of its domestic and foreign subsidiaries will constitute the controller for GDPR purposes in the event that the data in question is personal data under GDPR and is collected by HorizonIQ. If you have any questions or concerns regarding collection of your personal data, please contact gdpr@HorizonIQ.com.
HorizonIQ may utilize personal data in a number of ways to meet obligations under various agreements, to pursue legitimate interests such as facilitating services pursuant to contractual agreements with entities, including providing services such as colocation, managed hosting, cloud, and network services. The legal basis for this processing generally will be that it is necessary for the legitimate interests outlined above, but other bases may include compliance with legal obligations or consent.
The recipients of personal data will depend in large part on the services being provided that require the processing of personal data. In many cases, the only recipients of such data will be employees of HorizonIQ who have committed themselves to confidentiality. In other cases, HorizonIQ may transmit such data to processors or other controllers as necessary to meet HorizonIQ’s obligations.
HorizonIQ may transfer personal data outside of the European Union or European Economic Area. When HorizonIQ does this, appropriate safeguards will be in place, such as the insertion of approved model clauses. HorizonIQ will only transfer personal data to foreign controllers and processors who meet these standards.
HorizonIQ will only store your data as long as required by the basis for processing. For example, HorizonIQ will only store personal data that is being processed pursuant to HorizonIQ’s legitimate interest so long as such interest is present. If HorizonIQ is processing personal data based on consent, that consent may be withdrawn by you at any time. Please contact gdpr@HorizonIQ.com to withdraw such consent.
HorizonIQ is committed to fulfilling its obligations concerning the exercise of your rights under GDPR. Please be advised that you have the following rights under GDPR (to the extent GDPR applies to your personal data):
Last Updated: January 2024