Data Processing Addendum (DPA)
This DPA forms part of the Terms of Service between you (the Data Controller) and Red Ocean B.V. (the Data Processor).
1. Scope
This DPA applies to the processing of personal data subject to the GDPR where Red Ocean B.V. processes such data on behalf of you.
2. Obligations
- Only process personal data on your documented instructions
- Implement appropriate security measures
- Assist you in responding to data subjects exercising their rights
- Ensure confidentiality among staff
- Notify you of data breaches without undue delay
3. Sub-processors
We use DigitalOcean for hosting. You authorize this sub-processor. We will inform you of any changes and allow objection.
4. Termination
Upon termination of your Vigore account, we will delete or return personal data within 30 days, unless otherwise required by law.
5. Governing Law
This DPA shall be governed by Dutch law.
You agree to this DPA by using the Vigore service.