This English text is provided for information only. The legally binding version is the Czech original: Zpracovatelská smlouva. If the two versions differ, the Czech version prevails.
A short summary of the data processing agreement. It doesn’t replace it; the full binding text is in Czech.
- For data about your clients, you are the controller and digiWatcher (formerly Hlídač) is the processor under Article 28 of the GDPR. You conclude the agreement by accepting the terms of service, and it lasts as long as you have an account.
- We process website addresses, client names, alert contacts, and website access credentials if you enter them; for WordPress, the version, plugins, themes, and status; client portal users and status page subscribers. About WordPress users, only administrators’ user ID numbers, the dates their accounts were created, and their email as a hash. No special categories of data.
- We process the data only on your instructions, that is, according to your settings in the app, and bind everyone with access to confidentiality.
- Security: encrypted connections, separation of data between accounts, password hashes, two-factor authentication on request, and regular backups.
- We notify you of a security breach without undue delay and help you when your clients exercise their rights.
- After the agreement ends, we delete the data within 30 days, except accounting documents; database backups keep it longer.
- Sub-processors: Hostinger (EU), AlphaVPS (EU, Bulgaria), Resend (USA), and Google PageSpeed Insights (USA, only if you turn on speed measurement). We announce changes at least 30 days in advance; you can object and, if we don’t reach an agreement, cancel your account with a pro rata refund.
- Transfers outside the EU (Resend, and Google only for websites where you turn on speed measurement) rely on the European Commission’s standard contractual clauses.
- You are responsible for having a legal basis for the data you enter and for informing your clients.