Who and what
This agreement is part of the Terms of Service between you, the organization that uses a Daytwo workspace, and Addmore BV, trading as ++addmore. For the personal data in your workspace, you are the controller and ++addmore is the processor. It applies under Article 28 of the GDPR, and accepting the Terms accepts it.
The processing
- Purpose: running Daytwo for you, as the Terms and your use of it describe.
- Data subjects: the members of your workspace, and people who appear in your site's content, your chats, or the search figures you connect.
- Personal data: names, email addresses and other details in your site's code and pages, your chats and attachments, and your connected services.
- Duration: as long as your workspace exists, then as the Privacy Policy's retention section says.
What ++addmore does
- Processes the data only on your documented instructions, which are the Terms and how you use Daytwo, unless the law requires otherwise, in which case we tell you first where the law allows.
- Makes sure the people who can access it are bound to confidentiality.
- Keeps it secure: tokens for connected services are encrypted, every connection uses HTTPS, and only the people who run Daytwo can reach production data.
- Uses the subprocessors listed here, each under terms that protect the data as this agreement does, and tells you before adding one.
- Helps you answer people who exercise their rights, and with security, breach notification and impact assessments where you need it.
- Tells you without undue delay, and within 48 hours, after becoming aware of a personal data breach that affects your workspace.
- Deletes your workspace's data when you delete the workspace, apart from what the law requires us to keep and backups, which expire within 30 days.
- Gives you the information you need to show that this agreement is kept, and answers reasonable audit questions in writing.
Transfers
Where a subprocessor processes data outside the EU, the transfer runs under the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
Contact
Questions about this agreement, or a signed copy for your records, go to hello@daytwo.app.