Data processing agreement

This agreement is part of the terms. It applies where you use 10lines to handle personal data you are responsible for: you are the controller of that data, and the operator of this service processes it for you.

What is processed, and why

Subject matter and purpose: running the service you signed up for — storing your projects and scripts, connecting to the databases you add, running your scripts on the events you send, and sending the email they ask for.
Personal data: whatever your databases, events, uploads and scripts contain, which you decide; and the addresses of your project's members.
Data subjects: your users, customers and contacts, and your project's members.
Duration: for as long as you use the service, and the retention periods in the privacy policy after that.

What the operator undertakes

to process the data only on your instructions, which are your use of the service;
to keep it confidential, and have everybody who can reach it bound to;
to protect it as the security page describes;
to use only the sub-processors the privacy policy lists, to bind them to the same obligations, and to tell you before adding one, so you can object;
to tell you without undue delay after becoming aware of a breach affecting your data;
to help you answer the people the data is about, and with assessments and consultations the law asks of you, as far as the service makes that possible;
to delete your data when you delete your account, beyond what the law requires to be kept; you can take a copy first from your settings;
to give you what you need to show this agreement is kept, and to allow a reasonable audit of it.

Transfers

Where data leaves the country it was collected in, the transfer is made under the safeguards the law of that country requires, such as standard contractual clauses.