Source
Data processing agreement (dpa) — found from the homepage — Loomly
Checked for Loomly on 30 Sep 2026
- Page
- https://www.loomly.com/dpa/en
- Checked
- 30 Sep 2026, 13:33 UTC
- How we may use it
- Public page, crawling permitted
Technical details
- type
- page
- http status
- 200
- content hash
- sha256:ed72cc606a5f493980d434f4878fdad7b50709d3f511e7e53e3c0e616bbb0074
- permission
- robots_ok
- screenshot
- Screenshot on file (internal exhibit, not published)
Cited by
Facts read from this source
-
Provider entity Report an error
“This Data Processing Agreement (“DPA”) is entered into between the Owner, as defined in the Agreement (“Customer”) and Bending Spoons US Inc. (“Provider”).”
-
GDPR CCPA scope Report an error
““Applicable Privacy Law” means all applicable data protection laws and regulations, including but not limited to Regulation (EU) 2016/679 (“GDPR”) and the California Consumer Privacy Act at Cal. Civ. Code § 1798.100 et seq., and its implementing regulations (“CCPA”).”
-
Parent controller Report an error
“clause 11 of this DPA applies for the processing operations carried out by Bending Spoons S.p.A., as the parent company of the Provider (“Bending Spoons”), in its role as autonomous data controller”
-
Security measures link Report an error
“The Provider adopts at least the measures described at the following link: /security.”
-
List available Report an error
“makes available a list of the Sub-processors upon request of the Customer and at the following link: /security. The Provider will update the list to reflect any addition or replacement to Sub-processors”
-
Scc transfers Report an error
“Where such Adequacy Decision is not available or effective, the Parties agree that the Standard Contractual Clauses are incorporated into this DPA by reference and will apply to those transfers.”
-
Scc governing law Report an error
“under Clause 17 of the Standard Contractual Clauses, Option 1 is applicable. The laws of Italy will apply”
-
Scc jurisdiction Report an error
“under Clause 18(b) of the Standard Contractual Clauses, the courts of Milan, Italy will apply”
-
Supervisory authority Report an error
“The competent supervisory authority in accordance with Clause 13 of the Standard Contractual Clauses is the Italian Garante per la protezione dei dati personali.”
-
Audit rights Report an error
“An audit shall be performed during Provider’s normal working days and normal working hours, no more than once per year or if requested by a relevant authority, subject to notice given 90 days in advance.”
-
Breach notification Report an error
“Upon receiving knowledge of a Personal Data breach of Customer’s Personal Data, the Provider will notify Customer without undue delay.”
-
Retention Report an error
“Three years after the last use of the Service or the expiration of the subscription, as defined in the Agreement, whichever occurs later, the Provider shall delete the Personal Data”
-
Sensitive data Report an error
“The Agreement does not allow the upload of sensitive data.”
-
CCPA no sale Report an error
“the Provider shall not: (i) “sell” or “share” Personal Data within the meaning of the CCPA, and (ii) retain, use, or disclose Personal Data (a) for any purpose other than to perform, support, and improve the Service, or (b) outside of the direct business relationship between Provider and the Customer.”
-
Entity address Report an error
“Name: Bending Spoons US Inc. Address: 169 Madison Ave, Suite 11218, New York, NY 10016”
-
Data subject categories Report an error
“Data subjects mentioned or represented in the social media content and calendars managed by the users, and owners of the accounts connected to Loomly’s account.”
-
DPA precedence Report an error
“In the event of a conflict between the terms of this DPA and the Agreement, this DPA will prevail.”
-
Subprocessor scc Report an error
“the Provider commits to entering into the Standard Contractual Clauses with that Sub-processor and only the clauses under MODULE THREE: Transfer processor to processor will apply”
-
Provider role Report an error
“To provide the Service, the Provider will process certain personal data as a data processor on behalf of the Customer.”
Scores citing this record
- The Agency Lead European sovereignty
- The Agency Lead European sovereignty
- The Analyst European sovereignty
- The Analyst European sovereignty
- The Brand Governance Officer European sovereignty
- The Brand Governance Officer European sovereignty
- The Community Manager European sovereignty
- The Community Manager European sovereignty
- The Data Protection Officer European sovereignty
- The Data Protection Officer European sovereignty
- The Skeptic European sovereignty
- The Skeptic European sovereignty