COMPLIMENTARY INSTALLATION DATA PROCESSING TERMS OF SERVICE

✏️ Last modified

DATA PROCESSING TERMS OF SERVICE

This document governs the data processing activities related to Groundhogg Inc.’s Complimentary Installation service.

By using Groundhogg Inc.’s Complimentary Installation service, the Client agrees to these Data Processing Terms of Service. This document ensures compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and other applicable data protection laws.

1. Definitions

  • “Personal Data” means any information relating to an identified or identifiable individual provided by the Client for processing.
  • “Processing” means any operation performed on Personal Data, such as collection, recording, storage, and deletion.
  • “Client” refers to the entity using Groundhogg’s services and acting as the Data Controller.
  • “Groundhogg Inc.” refers to the entity providing Complimentary Installation services and acting as the Data Processor.
  • “GDPR” refers to the General Data Protection Regulation (EU) 2016/679.

2. Scope and Purpose of Processing

Groundhogg Inc. will process Personal Data solely for the purpose of installing contact information into the Client’s Groundhogg CRM. The processing activities include:

  1. Downloading a CSV file provided by the Client.
  2. Uploading the CSV to the Client’s WordPress website.
  3. Importing the contact data into the Groundhogg CRM.
  4. Deleting all local copies of the CSV file after the import is complete.

Groundhogg Inc. will not use the Personal Data for any other purposes.

3. Groundhogg’s Responsibilities

Groundhogg Inc. agrees to:

  • Process data only on documented instructions from the Client.
  • Ensure confidentiality of Personal Data by limiting access to authorized personnel.
  • Implement appropriate technical and organizational security measures to protect Personal Data against unauthorized access, alteration, or loss.
  • Delete all local copies of the CSV file immediately after completing the import.
  • Assist the Client in fulfilling GDPR obligations (e.g., responding to data subject requests).
  • Notify the Client in case of a data breach affecting Personal Data.

4. Client Responsibilities

The Client agrees to:

  • Ensure a lawful basis for processing the Personal Data before providing it to Groundhogg Inc.
  • Ensure Personal Data is accurate and up-to-date before submitting it for import.
  • Provide Groundhogg Inc. with clear written instructions regarding data processing.
  • Ensure that data subjects have been informed about the data processing activities.

5. Data Security Measures

Groundhogg Inc. shall implement appropriate security measures, including but not limited to:

  • Secure transfer methods for receiving the CSV file.
  • Access controls to restrict who can handle the data.
  • Immediate deletion of local copies of Personal Data post-import.
  • Encryption and secure storage of data during processing.

6. Data Deletion and Retention

  • Groundhogg Inc. will delete all copies of the CSV file from its systems immediately after the installation process is complete.
  • No Personal Data will be stored or retained by Groundhogg Inc. after processing.

7. Subprocessing

Groundhogg Inc. will not subcontract data processing activities to third parties without prior written approval from the Client.

8. Data Subject Rights

If a data subject requests access, correction, deletion, or restriction of their Personal Data, Groundhogg Inc. will:

  • Notify the Client and assist them in fulfilling their GDPR obligations.

9. Data Breach Notification

In the event of a data breach affecting Personal Data, Groundhogg Inc. will:

  • Notify the Client without undue delay after becoming aware of the breach.
  • Provide all relevant details about the breach and assist with any necessary mitigation measures.

10. Liability and Indemnification

Each party shall be liable for its own compliance with GDPR. Groundhogg Inc. shall not be responsible for any GDPR non-compliance resulting from the Client’s failure to obtain a lawful basis for data processing.

11. Term and Termination

  • These terms remain in effect as long as the Client continues to use Groundhogg Inc.’s Complimentary Installation service.
  • Groundhogg Inc. reserves the right to update these terms with reasonable notice to the Client.
  • Upon termination of the service, Groundhogg Inc. will delete any remaining Personal Data in its possession.

12. Governing Law

These terms shall be governed by and construed in accordance with the laws of Ontario, Canada.

By using Groundhogg Inc.’s Complimentary Installation service, the Client agrees to these Data Processing Terms of Service.