Data processing agreement
transAI | 2024
This agreement ("Agreement") is entered into between:
XIP Online Data (the "Controller"), hereafter "transAI", and The User (the "Processor"). Given the services provided by transAI and the third-party services used by transAI, this agreement outlines the responsibilities and requirements associated with the processing of personal data.
1. Definitions
- Personal Data: Any information relating to an identified or identifiable natural person.
- Processing: Any operation performed on personal data, such as collection, storage, modification, or deletion.
2. Purpose of Processing
- Personal data will be processed for the purpose of providing, maintaining, and enhancing the services offered by transAI, billing and authentication.
3. Data Processed
The types of personal data that will be processed include, but are not limited to:
- Names
- Email addresses
- Billing information
- Login credentials
4. Responsibilities of the Controller
transAI agrees to:
Only process personal data in line with the user's consent or other legal bases. Ensure that third-party services used adhere to data protection principles. Notify the processor of any data breaches without undue delay. Provide the processor with the necessary resources and support to comply with data protection regulations.
5. Responsibilities of the Processor
The User agrees to:
Comply with all terms of this Agreement. Report any suspected or actual data breaches to transAI without undue delay. Use transAI services in a manner that complies with all applicable laws and regulations.
6. Sub-processors
transAI uses the following sub-processors:
- Amazon Web Services for hosting: Amazon Web Services' data protection policies and procedures are adhered to.
- Auth0 for authentication: Auth0's data protection policies and procedures are adhered to.
- Datadog for monitoring: Datadog's data protection policies and procedures are adhered to.
- Sentry for monitoring: Sentry's data protection policies and procedures are adhered to.
- XIP Online Services for support: XIP Online Services' data protection policies and procedures are adhered to.
7. Data Retention
Personal data will be retained for as long as necessary to provide the services or as required by law. Once data is no longer required, it will be securely deleted.
8. Rights of Data Subjects
Users have the right to access, modify, and delete their personal data. Requests for data access, modification, or deletion should be submitted to transAI.
9. Termination
Upon termination of the user's relationship with transAI, personal data will be securely deleted unless there is a legal requirement to retain it.
10. Governing Law
This Agreement will be governed by the laws of The Netherlands, and the parties agree to submit to the exclusive jurisdiction of the courts of Almelo.
