1. Scope and roles
This agreement is part of the Terms of Service. It applies when the catalogs you upload to Prodsure contain personal data, for example the name and address of a manufacturer or responsible person who is a natural person.
For that data you are the controller and Digitech Hub, Ltd. is the processor, within the meaning of Article 28 of the GDPR. For your own account data we are a controller; see the Privacy Policy.
2. Details of the processing
- Subject and purpose: checking your catalogs against Safety Gate alerts and GPSR listing rules, showing you the results and emailing you about new matches.
- Duration: for as long as you keep the catalog or the account.
- Type of data: contact details that appear in product listings (names, postal and email addresses of manufacturers, importers or responsible persons).
- Data subjects: the people named in your product listings.
- Not intended: customer data, and special categories of personal data. Please do not upload them.
3. Our obligations
- We process the data only on your documented instructions. The Terms of Service and your use of the service are those instructions.
- The people who can access the data are bound by confidentiality.
- We apply the technical and organisational measures described on the Security page.
- We help you answer requests from data subjects and meet your obligations under Articles 32 to 36 of the GDPR, as far as the service allows.
- We tell you without undue delay after we become aware of a personal data breach that affects your data.
- We give you the information needed to show compliance with Article 28 and allow audits as set out below.
4. Sub-processors
You agree that we use these sub-processors:
| Sub-processor | Service | Location |
|---|---|---|
| Google Cloud EMEA Limited | Hosting, database, nightly check, sign-in | Database in Frankfurt, Germany; sign-in data may be processed in the United States |
| Resend, Inc. | Sending account and alert emails | United States |
We hold each of them to data protection obligations equivalent to these. We will update this page and email account holders at least 14 days before adding or replacing a sub-processor. If you object, you can stop using the service and delete your data.
5. Transfers outside the EEA
Where a sub-processor processes data outside the European Economic Area, the transfer is covered by the EU–US Data Privacy Framework or by the European Commission’s standard contractual clauses.
6. Deletion and return
You can delete a catalog at any time; its products and matches are deleted with it. When the account is closed we delete the remaining catalog data, unless the law requires us to keep it. On request before closing, we give you a copy of your catalogs.
7. Audits
On written request, not more than once a year, we answer reasonable questions about how we process your data and provide the information needed to verify this agreement. An on-site audit can be agreed where a supervisory authority requires it.
8. Signed copy
If you need this agreement as a signed document, write to contact@prodsure.eu.
Questions about this page: contact@prodsure.eu