Data processing agreement (dpa) — found from the homepage — Loomly

Cited by

Facts read from this source

• Provider entity Report an error

  “This Data Processing Agreement (“DPA”) is entered into between the Owner, as defined in the Agreement (“Customer”) and Bending Spoons Operations S.p.A. (“Provider”).”

• DPA last updated Report an error

  “Data Processing Agreement Last updated: 1 October 2026”

• Privacy laws Report an error

  ““Applicable Privacy Law” means all applicable data protection laws and regulations, including but not limited to Regulation (EU) 2016/679 (“GDPR”) and the California Consumer Privacy Act at Cal. Civ. Code § 1798.100 et seq., and its implementing regulations (“CCPA”).”

• Scc applicable Report an error

  “Where such Adequacy Decision is not available or effective, the Parties agree that the Standard Contractual Clauses are incorporated into this DPA by reference and will apply to those transfers.”

• Scc italian law Report an error

  “under Clause 17 of the Standard Contractual Clauses, Option 1 is applicable. The laws of Italy will apply”

• Scc jurisdiction Report an error

  “under Clause 18(b) of the Standard Contractual Clauses, the courts of Milan, Italy will apply”

• Breach notification Report an error

  “Upon receiving knowledge of a Personal Data breach of Customer’s Personal Data, the Provider will notify Customer without undue delay.”

• Retention Report an error

  “Three years after the last use of the Service or the expiration of the subscription, as defined in the Agreement, whichever occurs later, the Provider shall delete the Personal Data, except to the extent that the Agreement or applicable laws state otherwise. Upon the Customer's request, the Provider shall offer a means for the Customer to retrieve the Personal Data prior to such deletion.”

• CCPA no sale Report an error

  “the Provider shall not: (i) “sell” or “share” Personal Data within the meaning of the CCPA, and (ii) retain, use, or disclose Personal Data (a) for any purpose other than to perform, support, and improve the Service, or (b) outside of the direct business relationship between Provider and the Customer.”

• Withdrawal right Report an error

  “In the event of a breach of this DPA by the Provider, the Customer will be entitled to withdraw from the Agreement at no cost and without penalties, unless the Provider adopts the corrective measures required by the Customer.”

• Categories Report an error

  “Images and other personal data potentially included in the social media content and calendars managed by the users.”

• Supervisory authority Report an error

  “The competent supervisory authority in accordance with Clause 13 of the Standard Contractual Clauses is the Italian Garante per la protezione dei dati personali.”

• DPA precedence Report an error

  “In the event of a conflict between the terms of this DPA and the Agreement, this DPA will prevail.”

• Importer address Report an error

  “Name: Bending Spoons Operations S.p.A. Address: Via Nino Bonnet, 10”

• Scc module for subprocessors Report an error

  “the Provider commits to entering into the Standard Contractual Clauses with that Sub-processor and only the clauses under MODULE THREE: Transfer processor to processor will apply (to the exclusion of the other MODULES).”

• Subprocessor scc flowdown Report an error

  “enters into a written agreement with the Sub-processor containing the same obligations as set out in this DPA or, in any case, ensures that the Sub-processor offers no fewer guarantees than those offered by the Provider in this DPA”

• Content library Report an error

  “Content Calendar and Library”

4 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Brand Governance Officer European sovereignty
• The Community Manager European sovereignty
• The Data Protection Officer European sovereignty