Data Processing Agreement

This agreement forms part of the Terms of Service. It applies when FastMonitor processes personal data for you as your processor. You are the controller of that data.

If you need a signed copy, ask through the contact form.

We process personal data to provide the monitoring, alerting, status page and automation service described in the Terms, for as long as your account is active and until the data is deleted under the Deletion section below.

Data subjects:

• people who receive your alerts and reports;
• people you invite to your organisation;
• anyone whose personal data you put into monitor settings, job metadata, logs or status pages.

Categories of data: names, email addresses and other contact details, integration destinations, and whatever personal data you include in monitor configuration, job metadata and logs, or status pages. You must not include special-category data.

We process the data only on your documented instructions, which are the Terms, this agreement and your use of the service, unless the law requires otherwise (we will tell you first unless the law forbids it). Everyone we authorise to process the data is bound by confidentiality.

We apply the technical and organisational measures on our security page.

You authorise the providers on our sub-processor list. We give 30 days' notice on that page before adding or replacing one, and you may object on reasonable grounds. We impose data protection terms on each sub-processor that are no less protective than these, and remain responsible for them.

We help you, as far as we reasonably can, to answer requests from data subjects exercising their rights, and with security, breach notification, data protection impact assessments and consultation with the Information Commissioner.

We notify you without undue delay after becoming aware of a personal data breach affecting your data, with the information you need to meet your own obligations.

When your account ends, we delete the personal data within 30 days, unless the law requires us to keep it. Before then you can delete data in the service, or ask us through the contact form to return a copy.

We make available the information needed to show that we meet this agreement and allow for audits by you or an auditor you appoint, on reasonable notice and subject to confidentiality.

Where a sub-processor processes the data outside the UK, the transfer relies on UK adequacy regulations, the UK-US data bridge where the provider is certified, or the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. The sub-processor list shows the safeguard for each provider.