Source
Data processing agreement (dpa) — Countly
Checked for Countly on 29 Oct 2026
- Page
- https://countly.com/legal/enterprise-hosted-dpa
- Checked
- 29 Oct 2026, 21:19 UTC
- How we may use it
- Public page, crawling permitted
Technical details
- type
- page
- http status
- 200
- content hash
- sha256:e2824213f72de8255e584cc71896362898fb522b0948037abd989144df91aede
- permission
- robots_ok
- screenshot
- Screenshot on file (internal exhibit, not published)
Cited by
Facts read from this source
-
DPA last updated Report an error
“Last Updated: October 19, 2026”
-
DPA scope Report an error
“Applies to Countly Enterprise, Countly-hosted”
-
DPA roles Report an error
“The parties agree that Customer is a Controller and Countly is a Processor for the purposes of Processing Customer Data pursuant to this Agreement.”
-
DPA purpose limitation Report an error
“Countly shall process Personal Data for the purposes set forth in the Agreement and only in accordance with the lawful, documented instructions of Customer, except where otherwise required by applicable law.”
-
DPA applicable law Report an error
“including, where applicable, Regulation (EU) 2016/679 (the "EU GDPR" or "GDPR"), the UK GDPR (as defined in the Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019) (the “UK GDPR”), the Data Protection Act 2018 and the Privacy and Electronic Communications (EC Directive) Regulations 2003.”
-
DPA security measures Report an error
“Countly shall implement appropriate technical and organizational measures designed to protect against accidental, unauthorized or unlawful destruction, loss, alteration, or disclosure of, or access to Customer Data (each a "Security Incident").”
-
DPA breach notification Report an error
“Upon becoming aware of a Security Incident, Countly shall notify Customer without undue delay and pursuant to the terms of the Agreement”
-
General authorization Report an error
“Customer agrees that Countly may engage Countly Affiliates and is generally authorized to engage any third party Processor to process Customer Data on Countly’s behalf (collectively, "Sub-processors").”
-
Change notice Report an error
“Countly may, by giving no less than thirty (30) days' notice to Customer, add or make changes to the Sub-processors. Customer may object to the appointment of an additional Sub-processor within fourteen (14) calendar days of such notice on reasonable grounds”
-
Liability Report an error
“shall remain liable for any breach of the Schedule C caused by a Sub-processor.”
-
DPA assistance dsr Report an error
“Countly shall provide commercially reasonable assistance, including by appropriate technical and organizational measures as reasonably practicable, to enable Customer to respond to any inquiry, communication or request from a Data Subject seeking to exercise his or her rights under Applicable Data Protection Law”
-
DPA dpia assistance Report an error
“provide Customer with reasonable assistance with data protection impact assessments, security, breach notifications or prior consultations with data protection authorities”
-
DPA audit reports Report an error
“If the Agreement does not include a provision regarding security attestation reports, Countly shall provide a copy of its most current security attestation report upon Customer's written request no more than once annually.”
-
DPA audit fee Report an error
“Countly reserves the right to charge a fee (based on Countly’s reasonable costs) for any such audit.”
-
DPA deletion return Report an error
“Upon termination or expiration of the Agreement, Countly shall in accordance with the terms of the Agreement delete or make available to Customer for retrieval all relevant Personal Data (including copies) in Countly's possession, save to the extent that Countly is required by any applicable law to retain some or all of the Personal Data.”
-
DPA entity Report an error
“2026 © Countly Ltd. All rights reserved.”
-
DPA special categories Report an error
“The Personal Data Processed falls within the following special categories of Personal Data/Article 10 data: N/A”
-
DPA data subjects Report an error
“Customers employees End users of Customer’s website and/or applications (as relevant) that the Software is deployed on.”
-
DPA personal data categories Report an error
“Randomly generated/pseudo anonymized/advertising ID Name Username Organization/Company Address Phone number Email Location data (country code, region, city, coordinates) Birth year Gender Events Time zone Time processed Device information (OS, OS version, screen size and density, browser, browser version, device model, device type, device manufacturer, locale, screen orientation)”
-
DPA subprocessor list Report an error
“The list of Sub-processors currently engaged by Countly and authorized by the customer.”
1 fact read from this page is not shown because it could not be confirmed on the page as captured.
Scores citing this record
- The Agency Developer Consent-free operation & data minimisation
- The Agency Developer Data access, export & self-hosting
- The Agency Developer European sovereignty
- The Data Protection Officer Consent-free operation & data minimisation
- The Data Protection Officer Data access, export & self-hosting
- The Data Protection Officer European sovereignty
- The E-Commerce Marketing Lead Data access, export & self-hosting
- The E-Commerce Marketing Lead European sovereignty
- The Growth Analyst Data access, export & self-hosting
- The Growth Analyst European sovereignty
- The Public-Sector Site Owner Data access, export & self-hosting
- The Public-Sector Site Owner European sovereignty
- The Skeptic Consent-free operation & data minimisation
- The Skeptic Data access, export & self-hosting
- The Skeptic European sovereignty