Data Processing Agreement

1. Parties

Data processor
Zentic
Chamber of Commerce number: 72067527
VAT number: NL002335720B45
Email: support@zentic.io
Country of establishment: the Netherlands

Data controller
The natural or legal person that makes use of Zentic's services.

2. Purpose of the processing

Zentic processes personal data solely for the purpose of providing hosting, management and support services, including but not limited to:

• managed WordPress hosting;
• technical management and maintenance;
• support and troubleshooting;
• backups, security and monitoring.

In the context of this service provision, Zentic may have access to personal data contained in the Customer's websites, applications or web shops, including customer, user and order data, insofar as such access is necessary for support, management, maintenance or the resolution of technical problems.

Zentic processes personal data solely on the basis of written instructions from the Customer, unless legal obligations require otherwise.

3. Types of personal data and data subjects

3.1 Types of personal data

Depending on the use of the services, the following personal data may, among others, be processed:

• name, address and contact details;
• email addresses and telephone numbers;
• IP addresses and technical log data;
• website and web shop content (such as forms, orders and customer accounts);
• login credentials (hashed);
• payment and invoice statuses.

3.2 Categories of data subjects

• visitors to the Customer's websites;
• customers and users of the Customer's web shops;
• employees or representatives of the Customer.

4. Duration of the processing

The processing of personal data takes place during the term of the agreement between Zentic and the Customer and ends no later than 30 days after termination of the agreement, unless:

• the Customer deletes the data earlier; or
• legal obligations require a longer retention period.

5. Security measures

Zentic takes appropriate technical and organizational measures to secure personal data against loss, unauthorized access and unlawful processing, including:

• a role and permission structure with restricted access;
• encryption and hashing of login credentials;
• secure hosting infrastructure;
• monitoring and logging;
• regular updates and security patches;
• periodic backups.

6. Engagement of sub-processors

In the performance of its services, Zentic makes use of sub-processors, including but not limited to providers of:

• hosting and infrastructure services;
• email and communication services;
• monitoring and security services;
• support and customer management systems.

An up-to-date overview of sub-processors is included in Zentic's privacy statement.
By using the services, the Customer grants general consent for the engagement of sub-processors.

Zentic ensures that sub-processors are contractually obliged to maintain an equivalent level of data protection.

7. Data breaches

Zentic will notify the Customer without undue delay of a personal data breach (data breach) after it has become aware of it.

The notification shall contain, insofar as possible:

• the nature of the data breach;
• the likely consequences;
• the measures taken or proposed.

8. Assistance with the rights of data subjects

Zentic shall, insofar as reasonably possible, cooperate with requests from data subjects relating to:

• access;
• rectification;
• erasure;
• restriction of processing;
• data portability.

If this assistance requires work that falls outside the standard service provision, Zentic is entitled to charge costs for this.

9. Confidentiality

Zentic ensures that persons who process personal data under its authority are bound by a duty of confidentiality.

10. Return and deletion of data

After termination of the agreement, Zentic will delete the personal data no later than 30 days after the end of the retention period, unless legal obligations provide otherwise.

Securing personal data prior to termination of the agreement is the responsibility of the Customer.

11. Audit and inspection

The Customer has the right, after prior written notice and with due regard to reasonableness, to have compliance with this Data Processing Agreement verified.

The costs of an audit shall be borne by the Customer, unless there are demonstrable shortcomings on the part of Zentic.

12. Liability

Zentic's liability arising from this Data Processing Agreement is limited in accordance with the liability provisions in the main agreement between the parties.

13. Applicable law and disputes

This Data Processing Agreement is governed by Dutch law.
Disputes shall be submitted to the competent court in the Netherlands.

14. Final provisions

This Data Processing Agreement forms an integral part of the agreement between Zentic and the Customer.
In the event of conflict between provisions, this Data Processing Agreement shall prevail insofar as it concerns the processing of personal data.