Data Processing Agreement

Controller: the company that created the AdPatrol account (“you”).

Processor: Rast Marketing s.r.o., company ID 52157911, Strážska cesta 31, 960 01 Zvolen (“we”).

The agreement starts when you accept the Terms of Service and lasts as long as you use AdPatrol.

We process personal data only to provide AdPatrol to you: we store it, show it to your team, send reports and alerts and create sharing links.

• Data subjects: your team members, recipients of reports and alerts, and people you mention in notes or comments.
• Data: name, email, role, profile photo, sign-in data and the content of notes and comments.
• Duration: as long as the agreement lasts. After that we delete the data as described under End of processing.

We process the data only on your instructions. Your instructions are these terms and the way you set up and use AdPatrol. If we believe an instruction breaks data protection rules, we’ll tell you.

• People with access to the data are bound by confidentiality.
• We protect the data with appropriate technical and organisational measures, described below.
• We help you handle requests from people exercising their rights.
• We help you with impact assessments and your other obligations under Articles 32 to 36 of the GDPR.
• We tell you about a personal data breach without undue delay.
• We give you the information needed to show that we comply with this agreement, and allow audits at a time we agree on.

We protect the data mainly like this:

• encrypted connections (HTTPS) and encryption of stored data in the database and file storage,
• each customer’s data kept separate in the database (Row Level Security),
• service keys only on the server, never in the browser,
• access to the data only for people who need it to run the service,
• database, app and file storage in the EU.

You agree that we may use sub-processors. Their current list is under Who helps us in the Privacy Policy.

We’ll tell you about a new sub-processor in advance. If you don’t agree with it, you can object, and if we can’t agree, end the agreement.

We bind every sub-processor to the same data protection we promise in this agreement.

We keep the data in the EU. If a sub-processor processes it outside the EU, the transfer relies on the EU standard contractual clauses or a European Commission adequacy decision.

When you delete your account or the agreement ends, we delete the personal data unless the law requires us to keep it. It disappears from backups once they are overwritten. You can ask for a copy of the data before it is deleted.

If this agreement and the Terms of Service differ, this agreement prevails on data protection. Liability is governed by the Terms of Service.

Rast Marketing s.r.o., Strážska cesta 31, 960 01 Zvolen, company ID 52157911. Email: info@rast.digital.