Commercial Service Providers need to sign the SURFconext connection agreement. Whether or not money is involved is not an issue. We consider a vendor commercial if they are not a SURFnet member. We want them to fill out some questions regarding the General Data Protection Regulation (GDPR) that are relevant for SURFconext. Answers to these questions we share with the institutions connected to SURFconext in the context of transparency. They then quickly have an idea of the SP's efforts regarding privacy and security. These privacy questions can be answered in the SP dashboard and the answers are thus available to institutions to consider.
Making them available is easy. Login to the SP Dashboard and select the service you need to fill the privacy questions of. Then, do the following.
Go to the tab 'Privacy'
Fill out the requested questions. Don't forget to save!