top of page

DPA Schedule

Last updated: June 13, 2025

​​

Data Processing Agreement (Schedule to the Terms & Conditions)


Effective Date: Automatically applies upon use of Cloudect's troubleshooting or support services involving personal data.

​

1. Scope and Role of the Parties

Cloudect processes personal data solely for the purpose of delivering diagnostic, support, or troubleshooting services as requested by you. You are the Data Controller; Cloudect is the Data Processor.

​

2. Nature and Purpose of Processing

Processing shall be limited to the duration of the engagement and is carried out solely for identifying and resolving technical issues. Data may include server logs, configuration data, or other inputs provided voluntarily by you.

​

3. Types of Personal Data and Data Subjects

Types of personal data: Names, email addresses, IP addresses, login records, or any incidental personal data contained in diagnostic outputs or logs.
Categories of data subjects: Employees, contractors, users, or clients of the Data Controller.

​

4. Processor Obligations

Cloudect shall:

  • Process data only on instructions from the Data Controller;

  • Ensure confidentiality obligations are in place for staff with access;

  • Implement appropriate technical and organisational measures (aligned with Article 32 GDPR);

  • Not subcontract processing without prior written authorisation (except for listed sub-processors);

  • Notify the Controller of any personal data breach without undue delay;

  • Assist the Controller with data subject requests, data protection impact assessments, and cooperation with supervisory authorities.

​

5. Sub-Processors

Cloudect uses the following sub-processors for infrastructure and diagnostics. 

​

  • ​Amazon Web Services EMEA SARL, (Irish Branch) | One Burlington Plaza, Burlington Road, Dublin 4, D04 RH96, Ireland (parent in Luxembourg) | Processing activities: Cloud infrastructure and data hosting services​

  • Google Ireland Limited | Gordon House, Barrow Street, Dublin 4, Ireland | Processing activities: Cloud infrastructure and data hosting services

  • Microsoft Ireland Operations Limited | One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland | Processing activities: Cloud infrastructure and data hosting services

 

Each sub-processor processes personal data only as necessary to provide the agreed cloud services.
You authorise the use of these sub-processors. Cloudect will inform you of any intended changes to this list and give you the opportunity to object.

​

6. Data Transfers

Any transfer of personal data outside the EEA will be subject to appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

​

7. Data Retention and Deletion

Cloudect will delete or return all personal data upon termination of the service or upon your request, unless EU or Irish law requires retention.

​

8. Audit Rights

You may audit Cloudect’s data processing activities upon reasonable notice, subject to confidentiality and frequency limitations (no more than once per year).

​

9. Governing Law

This DPA shall be governed by Irish law and subject to the exclusive jurisdiction of the courts of Ireland.

bottom of page