Data processing agreement (dpa) — Better Stack Uptime

Cited by

Facts read from this source

• DPA applicable laws Report an error

  “including (a) the GDPR, (b) the GDPR as saved into United Kingdom law by virtue of section 3 of the United Kingdom's European Union (Withdrawal) Act 2019 ("UK GDPR") and the Data Protection Act 2018 (together, "UK Laws"), (c) the Swiss Federal Data Protection Act and its implementing regulations ("Swiss DPA"), and (d) CCPA”

• Dpf certification Report an error

  “the parties rely on Better Stack's certification under the EU-U.S. Data Privacy Framework, the Swiss-US Data Privacy Framework and the UK-US Data Privacy Framework”

• Scc fallback Report an error

  “then, such transfer shall be subject to the appropriate Standard Contractual Clauses, which shall be deemed incorporated into and form part of this DPA as specified in Schedule D below.”

• Breach notification Report an error

  “Notify Customer of any Personal Data Breach by Better Stack, its Subprocessors, or any other third-parties acting on Better Stack’s behalf without undue delay of becoming aware of a Personal Data Breach.”

• Return deletion Report an error

  “on the termination of the data processing services or upon Customer’s reasonable request, Better Stack shall, and shall cause any Subprocessors to, at the choice of Customer, return all the Customer Personal Data and copies of such data to Customer or securely destroy them”

• Processing locations Report an error

  “Better Stack and its Subprocessors may transfer and process personal data to and in the United States of America and other locations in which Better Stack, its affiliates or its Subprocessors maintain data processing operations”

• General authorization Report an error

  “Customer hereby authorizes Better Stack to entrust additional processors with the processing of personal data according to this DPA.”

• Customer role controller Report an error

  “Better Stack agrees to process Personal Data received from the Customer only on the instructions of the Customer. As the Controller of Personal Data, for avoidance of doubt, the Customer sets the purpose of processing for this DPA.”

• Audit cooperation Report an error

  “If a competent supervisory Authority requires an audit of the data processing facilities from which Better Stack processes Customer Personal Data in order to ascertain or monitor Customer’s compliance with Applicable Data Protection Legislation, Better Stack will cooperate with such audit. Customer is responsible for all costs and fees related to such audit”

• Dpia assistance Report an error

  “Where appropriate, the preparation of data protection impact assessments and, where necessary, carrying out consultations with any competent supervisory authority.”

• No sale or sharing Report an error

  “Better Stack is prohibited from: (a) selling Customer Personal Data or otherwise making Customer Personal Data available to any third party for monetary or other valuable consideration; (b) sharing Customer Personal Data with any third party for cross-behavioral advertising”

• Account data controller Report an error

  “regarding the processing of Account Data, Customer is a controller and Better Stack is an independent controller, not a joint controller with Customer.”

• Subprocessor list online Report an error

  “exclusive of the list of Subprocessors Better Stack maintains online (see below).”

• Subject request forwarding Report an error

  “In the event that a data subject sends such a request directly to Better Stack, Better Stack will promptly send such request to Customer;”

• Security measures Report an error

  “Maintain appropriate organizational and technical security measures (including with respect to personnel, facilities, hardware and software, storage and networks, access controls, monitoring and logging, vulnerability and breach detection, incident response, encryption of certain Customer Personal Data)”

• DPA term Report an error

  “This DPA shall remain in effect as long as Better Stack carries out Personal Data processing operations on behalf of Customer or until the termination of the Better Stack Contract”

• Law enforcement notice Report an error

  “Any legally binding request for disclosure of Customer Personal Data by a law enforcement authority, unless Better Stack is otherwise forbidden by law to inform Customer”

• Third party processors acknowledged Report an error

  “in the provision of some services (such as CRMs), Better Stack, on receipt of instructions from Customer, may transfer Customer Personal Data to and otherwise interact with third party data processors.”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.

Scores citing this record

• The Agency Developer European sovereignty
• The Customer Support Lead European sovereignty
• The E-Commerce Operations Manager European sovereignty
• The SaaS Platform Engineer European sovereignty
• The Information Security Officer European sovereignty
• The Skeptic European sovereignty