DPA

Roles

For personal data contained in your graphs and run data, you are the controller and [fix]net is the processor. We process that data only on your documented instructions, as set out in the agreement and this DPA.

Scope of processing

We process personal data solely to provide the service:

• Subject matter — operation of the [fix]net platform.
• Duration — the term of your subscription plus the deletion window.
• Categories — as determined by the data you choose to send to the graph.

Sub-processors

You authorise us to engage the sub-processors listed in our register. We impose data-protection obligations on each and give advance notice of changes, allowing you to object on reasonable grounds.

International transfers

Where personal data is transferred outside the EEA or UK, we rely on Standard Contractual Clauses and the UK Addendum, together with supplementary measures as appropriate.

Security & breach

We maintain the technical and organisational measures described on our security page, and will notify you without undue delay after becoming aware of a personal-data breach affecting your data.

Audits & deletion

We make available the information needed to demonstrate compliance and support audits within reason. On termination, we delete or return personal data per your instruction and our privacy policy.