Data processing agreement (GDPR Article 28)

This agreement forms part of the terms of service. The Customer is the controller; Faciliclic is the processor.

Subject and duration

Hosting and processing of the data entered in the Service to manage field jobs, for the duration of the subscription.

Data and data subjects

Contact details of the Customer's customers and on-site contacts, requesters, the Customer's users; job descriptions, photos, signatures, equipment data.

Processor commitments

• Process data only on the Customer's documented instructions (the Service's features and settings are instructions).
• Ensure confidentiality of authorised personnel.
• Apply appropriate security: encryption in transit, role-based access, per-company data isolation, encrypted backups.
• Engage sub-processors only after informing the Customer, who may object; current list in the privacy policy.
• Assist the Customer with data subject requests and security obligations.
• Notify personal data breaches within 48 hours of becoming aware.
• At the end of the contract, return (export) then delete the data within 90 days.
• Make available the information needed to demonstrate compliance.