Data processing agreement (dpa) — updown.io

Cited by

Facts read from this source

• DPA in force Report an error

  “It's already in force for every account, you don't need to sign or return anything.”

• DPA GDPR article28 Report an error

  “It applies whenever updown.io processes personal data on your behalf and is required by Article 28 of the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR").”

• DPA negotiation Report an error

  “We do not negotiate changes to this text.”

• DPA roles Report an error

  “You are the "controller", we are the "processor", and we only act on your instructions.”

• DPA scope of law Report an error

  “"Applicable Data Protection Law" means the GDPR and any national law implementing or supplementing it, as well as the UK GDPR and the Swiss FADP where relevant to the processing.”

• DPA excludes controller data Report an error

  “For the personal data we collect as a controller in our own right (your account, billing and contact details, log and location data), this DPA does not apply; that processing is governed by our Privacy Policy.”

• DPA processing details Report an error

  “Subject matter, nature and purpose: collection, storage, consultation, transmission (to alert recipients and sub-processors as instructed) and erasure of data, for the purpose of monitoring the availability and performance of the URLs and endpoints you configure, diagnosing downtime, and delivering the alerts, reports and status pages you request.”

• DPA special categories Report an error

  “Special categories: none requested or intended (see section 7).”

• DPA retention duration Report an error

  “Duration: for as long as your account is active, subject to the deletion rules in section 10 and the "Retention" section of the Privacy Policy.”

• DPA security measures Report an error

  “Implement and maintain, in accordance with Article 32 GDPR and appropriate to the risk, technical and organisational measures such as the following:”

• DPA encryption in transit Report an error

  “Encryption in transit (TLS/HTTPS) for the website and the API.”

• DPA log retention Report an error

  “logs are rotated automatically and any log that may contain personal data (e.g. IP addresses) is kept for no more than one month.”

• DPA inactive data purge Report an error

  “Data minimisation and automatic purging: response bodies retained only for downtime diagnosis, metrics progressively aggregated, inactive checks and accounts deleted after 3 years.”

• DPA instant deletion Report an error

  “Instant deletion of account data on account or monitor deletion, with backup copies purged within one week.”

• DPA dsar assistance Report an error

  “assist you by appropriate technical and organisational measures, insofar as possible, in fulfilling your obligation to respond to requests from data subjects exercising their rights under Chapter III GDPR.”

• DPA breach notification Report an error

  “Notify you without undue delay after becoming aware of a personal data breach affecting your data, and provide you with the information you reasonably need to meet your own notification obligations.”

• DPA delete or return Report an error

  “At your choice, delete or return all the personal data after the end of the provision of the service, and delete existing copies unless EU or member state law requires storage.”

• List location Report an error

  “The current list, with each sub-processor's location and the safeguard in place for any transfer outside the EEA, is maintained in the "List of sub-processors" section of the Privacy Policy.”

• Notice period Report an error

  “notify you by email at least 30 days in advance. If you have a reasonable, data-protection-related objection you may raise it during that period; if we cannot address it, you may terminate the affected part of the service and receive a pro-rata refund of any unused prepaid credits.”

• DPA international transfers Report an error

  “Where we transfer personal data processed on your behalf outside the EEA, we rely on a mechanism recognised under Chapter V of the GDPR: the Standard Contractual Clauses (Implementing Decision (EU) 2021/914), the EU-US Data Privacy Framework, or, where neither applies, another lawful basis.”

• DPA scc module Report an error

  “Where the Standard Contractual Clauses apply and you are established in the EEA, you instruct us to enter into them (module 3, processor-to-processor) with the relevant sub-processor on your behalf.”

• DPA audit Report an error

  “We will make available, on written request and no more than once per 12-month period (unless required more often by a supervisory authority), the information reasonably necessary to demonstrate compliance with this DPA”

• DPA audit independent Report an error

  “you may conduct, or mandate an independent auditor to conduct, an audit of the relevant processing activities, on at least 30 days' notice, during business hours, without disrupting our operations or those of our other customers, and subject to confidentiality. Each party bears its own costs.”

• DPA liability Report an error

  “Each party's liability under or in connection with this DPA is subject to the exclusions and limitations of liability set out in the Agreement.”

• DPA return format Report an error

  “On request made before deletion, we will return the personal data to you in a commonly used electronic format instead of, or in addition to, deleting it.”

• DPA governing law Report an error

  “This DPA is governed by the law of France and subject to the jurisdiction of the French courts, in line with the Agreement, without prejudice to any mandatory data subject rights under Applicable Data Protection Law.”

• DPA precedence Report an error

  “In case of conflict between this DPA and the rest of the Agreement on a data protection matter, this DPA prevails. In case of conflict between this DPA and the Standard Contractual Clauses, the Standard Contractual Clauses prevail.”

• DPA customer obligations Report an error

  “You must not deliberately route special categories of personal data (Article 9 GDPR) or criminal-offence data through the monitoring features (for example via the text-search feature), as the service is not designed to safeguard such data.”

• DPA changelog Report an error

  “Sept 7th, 2026: Initial web version.”

• Company location Report an error

  “Made with in Paris, France since 2012”

Scores citing this record

• The Agency Developer European sovereignty
• The Customer Support Lead European sovereignty
• The E-Commerce Operations Manager European sovereignty
• The SaaS Platform Engineer European sovereignty
• The Information Security Officer European sovereignty
• The Skeptic European sovereignty