Someone has asked about GDPR processor agreements and didn't get a very satisfactory answer.
On the Carestream website there is a GDPR privacy Notice for users of the site.
For dentists that use CSR4+ patient data back-up service, we need a link which describes how Carestream processes this data, stores it, where it is stored etc to comply with GDPR. i.e we need a Privacy Notice outlining how you process our patient information with regard to the back-up service
We have been directing customer to the following link https://community.carestreamdental.com/thread/2829-gdpr-common-questions-for-cs-r4, however if you need something more specific that is not answered, you can contact our data protection team directly at email@example.com who should be able to assist you.