Data processing addendum (DPA)

Scope

This Data Processing Addendum supplements our Terms and applies when GetWhatChanged processes personal data on your behalf as a processor or service provider.

Roles of the parties

You are the controller (or business) for customer data you submit to the Services. GetWhatChanged acts as processor (or service provider) and processes personal data only on documented instructions from you, except where required by law.

Processing details

• Subject matter: provision of website monitoring and change detection services
• Duration: for the term of the Services agreement, plus limited retention for legal and backup purposes
• Nature: collection, storage, retrieval, and analysis necessary to provide the Services
• Data types: account details, monitored URLs, snapshots, logs, and related metadata
• Data subjects: your authorized users and individuals whose data may appear in monitored content

Security and subprocessors

We maintain reasonable technical and organizational safeguards appropriate to the risk, and we engage subprocessors under written obligations that protect personal data.

Data subject requests and assistance

Taking into account the nature of processing, we provide reasonable assistance so you can respond to requests to access, correct, delete, or export personal data when required by law.

International transfers

Where required, parties will use lawful transfer mechanisms for cross-border data transfers and implement supplementary protections as appropriate.

Contact

For DPA-related requests, contact hello@getwhatchanged.com.