Data processing agreement
Updated
For the free checker, Perceivly decides what data is processed and why, so we are the controller; our privacy policy applies. When paid monitoring launches, customers will scan their own and their clients’ websites through Perceivly, and we will process data on their behalf as a processor under a data processing agreement (DPA) based on Article 28 GDPR.
What the DPA covers
- Processing only on the customer’s documented instructions, for the duration of the contract.
- Confidentiality of everyone who handles the data.
- Technical and organizational security measures, described on our security page.
- Use of sub-processors only with notice and the right to object; the current list is in our privacy policy.
- Help with data subject requests, breach notification without undue delay, and deletion or return of data at the end.
- EU hosting; EU Standard Contractual Clauses wherever data may be accessed from outside the EEA.
Getting a signed copy
Email [email protected] and we’ll send our DPA for signature.