Data processing agreement
Article 28 terms for customers who need them on file.
Last updated
This agreement applies where SiteAccessible processes personal data on your behalf. You are the controller; we are the processor.
Subject matter and duration
| Item | Detail |
|---|---|
| Subject matter | Provision of the accessibility widget and dashboard |
| Duration | For as long as the account is active |
| Nature and purpose | Hosting configuration, serving the widget, aggregating usage counters |
| Categories of data subject | Your authorised users. Website visitors are not identified. |
| Categories of personal data | Name, email, organisation and authentication data |
| Special categories | None processed |
Our obligations
- Process personal data only on your documented instructions.
- Ensure personnel are bound by confidentiality.
- Implement appropriate technical and organisational measures.
- Engage sub-processors only with prior general authorisation and 30 days' notice of changes.
- Assist with data subject requests and with your Article 32–36 obligations.
- Delete or return personal data at the end of the agreement.
- Make available the information needed to demonstrate compliance and allow audits.
Breach notification
We will notify you without undue delay, and in any case within 48 hours of becoming aware of a personal data breach affecting your data, with the information available at the time.
Getting it signed
Enterprise customers receive a counter-signed copy on request. Write to [email protected] with your legal entity details.