This Data Processing Agreement (“DPA”) forms part of the agreement between StoreLocatorWidgets.com (“Processor”) and the customer (“Controller”) governing use of the Service, and applies wherever Processor handles personal data on the Controller’s behalf, such as visitor location searches or customer contact details collected through the Locator Service.
Scope of Processing
Processor will process personal data only to provide the Service, and only in accordance with the Controller’s documented instructions, unless otherwise required by applicable law. Personal data processed under this DPA is generally limited to location and search data submitted through a customer’s store locator, and any account contact details the Controller provides.
Confidentiality and Security
Processor will ensure that personnel authorized to process personal data are subject to confidentiality obligations, and will implement appropriate technical and organizational measures to protect that data against unauthorized or unlawful processing and against accidental loss, destruction, or damage — see our Security statement for details of the specific measures in place.
Sub-processors
Processor uses a limited number of sub-processors, such as cloud hosting and payment providers, to deliver the Service. Processor remains responsible for the acts and omissions of its sub-processors to the same extent it would be responsible if performing their services directly.
Data Subject Requests
Where Processor receives a request from a data subject relating to personal data processed on the Controller’s behalf, Processor will promptly notify the Controller and will not respond to the request directly except on the Controller’s documented instructions.
International Transfers
Where personal data is transferred outside of the country in which it was originally collected, Processor will ensure appropriate safeguards are in place consistent with applicable data protection law.
Deletion or Return of Data
Upon termination of the Service, Processor will delete or return all personal data processed on the Controller’s behalf, except to the extent applicable law requires continued storage.
Contact Us
If you have any questions or concerns about this Data Processing Agreement, please feel free to email us at [email protected].