Data Processing Addendum
This Data Processing Addendum (“DPA”) forms part of the agreement between you (“Customer”) and VisionGuard (“Processor”) and applies where we process personal data on your behalf under the GDPR.
1. Roles
For camera streams and recordings you route through the service, you act as thecontroller and VisionGuard acts as the processor. For account data we hold to operate the service, VisionGuard is the controller (see our Privacy Policy).
2. Subject matter and purpose
We process personal data only to relay, and where you configure it, temporarily store your camera streams and to provide detection and alerting, for the duration of your use of the service.
3. Processor obligations
- process personal data only on your documented instructions;
- ensure persons authorised to process the data are bound by confidentiality;
- implement technical and organisational security measures appropriate to the risk (GDPR Art. 32), including encryption in transit;
- assist you, taking into account the nature of processing, in responding to data subject requests.
4. Subprocessors
You authorise us to engage infrastructure subprocessors (hosting and content delivery) under written terms no less protective than this DPA. We will inform you of intended changes and give you the opportunity to object.
5. Personal data breach
We will notify you without undue delay after becoming aware of a personal data breach affecting your data, and provide information reasonably available to help you meet your own notification obligations.
6. Audit
We will make available information necessary to demonstrate compliance with this DPA and allow for and contribute to audits, subject to reasonable confidentiality and security conditions.
7. Deletion and return
On termination of the service, we will delete or return your personal data at your choice, and delete existing copies unless retention is required by law.
8. International transfers
Processing takes place within the EU/EEA. Any transfer outside the EU/EEA will be governed by appropriate safeguards such as the Standard Contractual Clauses.
9. Governing law
This DPA is governed by the laws of Finland and is subject to the jurisdiction of the courts of Helsinki, Finland.
10. Contact
Data protection contact: [email protected].