Data processing agreement

This DPA applies when UptimeGlass (N-SAID Holding, LLC, contact: sales@webvklidu.cz) processes third-party personal data on your behalf. It is Appendix A of our Privacy Policy.

• Scope: The Processor (UptimeGlass) processes third-party data provided by the Controller (Customer), specifically contact targets for notification channels (emails, phone numbers, tokens) and recipient emails for monthly PDF reports.
• Controller Obligations: The Controller guarantees that they possess a valid legal basis (e.g., explicit consent) to input third-party data into the Processor's systems.
• Security Measures (TOMs): The Processor applies strict technical and organizational measures, including TLS encryption for all data in transit, AES-256 encryption at rest for database backups via Cloudflare R2, and database-level encryption for sensitive tokens and webhooks.
• Subprocessor Changes: The Processor will provide a 30-day prior notice of any intended changes concerning the addition or replacement of core subprocessors. The current subprocessors are listed in the Privacy Policy.
• Breach Notification: In the event of a confirmed personal data breach affecting the Controller's data, the Processor commits to notifying the Controller without undue delay, and no later than 48 hours after becoming aware of the incident.