Hello,

I am using a Ring camera account for a commercial office (MediciPlus GmbH, Germany) for the purpose of property/theft protection. I have a few questions regarding GDPR compliance that I would like answered in writing for our records:

1. Does Ring's GDPR Data Processing Addendum (DPA) apply automatically to my account, given that Ring does not distinguish between business and private accounts?

2. Does this DPA cover video data of third parties who are not the account holder — specifically, employees of my company who are captured on camera in the office, not just data about me as the account owner?

3. On what legal basis is video data transferred to and stored on servers in the United States (e.g., EU-US Data Privacy Framework certification and/or EU Standard Contractual Clauses)? Is this certification/agreement valid for footage containing employees of a business customer?

4. Could you please send me a copy of, or a link to, the current DPA/GDPR documentation that applies to my account?

BR

Mr. Shenenko