Draft: this text has not been reviewed yet and is not yet in force.
Data processing agreement
This agreement is part of the terms of service and applies when you (the controller) process personal data with wemovedata, and Kwitaro Business Solutions B.V. (the processor) processes it for you, as meant in Article 28 of the GDPR.
Version: [date]
1. Subject and duration
We process personal data only to provide wemovedata to you, for as long as your account exists, and only on your documented instructions: the configuration of your apps, workflows, data stores and action sets is such an instruction.
| Categories of data | Whatever your apps and workflows process; e-mail addresses of notification recipients; content of logs |
|---|---|
| Data subjects | Your employees, customers, suppliers and other persons whose data you process |
| Nature | Storage, computing, transfer to the destinations you configure, logging |
2. Our obligations
- Confidentiality: everyone with access is bound to secrecy.
- Security: the measures described on Security, which we keep up to date.
- Assistance: we help you with requests from data subjects, data protection impact assessments and prior consultation, as far as reasonable.
- Personal data breaches: we tell you without undue delay, and at the latest within [48] hours after discovery, with the information you need to notify.
- Location: data is stored and processed in the European Union. Transfers outside the EU happen only with the safeguards of Chapter V of the GDPR.
3. Sub-processors
You authorise us to use these sub-processors; we tell you [30] days before adding or replacing one, and you may object.
| Sub-processor | Purpose | Location |
|---|---|---|
| [Hostinger / Scaleway] | Servers | EU |
| Scaleway SAS | E-mail delivery of notifications; encrypted backups | France |
4. End
When the agreement ends you can export your data for [30] days; afterwards we delete it, including from backups within [30] days, unless the law requires otherwise.
5. Audits
We make available the information you need to show compliance. You may have an audit carried out once a year at your own cost, with [30] days' notice and under confidentiality.
6. Liability
The liability provisions of the terms of service apply.