Data Processing Addendum (DPA)

This DPA forms part of the agreement between the Client (Controller) and DeluxeWEB (Processor) where DeluxeWEB processes personal data on behalf of the Client.

Subject matter & duration

Processing relates to SEO, website builds, and link-building services and continues for the term of the main agreement.

Nature & purpose

Processing may include access to website analytics, CMS data, and contact details in order to perform agreed services.

Types of data & data subjects

• Customer and visitor behavior data
• Contact details of client staff and partners

Processor obligations

• Process data only on documented instructions from the Client
• Ensure confidentiality and train authorized personnel
• Implement appropriate technical and organizational measures
• Assist the Client in fulfilling data subject requests
• Notify the Client of personal data breaches without undue delay
• Delete or return personal data upon termination

Sub-processors

Client authorizes the use of sub-processors necessary to provide the services. A current list is available on request via online@deluxeweb.online.

International transfers

For transfers outside the EEA, Processor will use appropriate safeguards such as the EU Standard Contractual Clauses.

Audit

Upon reasonable notice, the Client may conduct audits or receive summaries of independent audits regarding relevant controls.

Contact

Privacy inquiries: online@deluxeweb.online