These terms form part of the Terms of Service and meet Article 28 of the UK GDPR. They apply to personal data about your clients and other people that you put into Plotwire ("Client Data").
1. Roles
You are the controller of Client Data. Plotwire UK Ltd is your processor.
2. Details of the processing
| Item | Detail |
|---|---|
| Subject matter | Hosting and processing Client Data so you can use Plotwire |
| Duration | Your subscription, plus the 30-day period in Terms clause 12.3 |
| Nature and purpose | Storing, displaying, exporting and sharing (at your instruction) job, plan and planner information |
| Types of data | Names, site and postal addresses, contact details, job notes |
| Data subjects | Your clients, their occupants, and contractors you record |
You must not put special category data (for example health information) into Plotwire.
3. Our obligations
We will:
- process Client Data only on your documented instructions, which are these Terms and your use of the Service, unless the law requires otherwise (in which case we will tell you, unless the law forbids it);
- make sure anyone we authorise to process Client Data is bound by confidentiality;
- keep appropriate technical and organisational security measures in place, including encryption, per-account access controls enforced in the database, and two-step login on admin systems;
- help you, where reasonable, to respond to requests from people exercising their data rights, and with security, breach notification and data protection impact assessments;
- tell you without undue delay, and in any case within 48 hours of becoming aware, of a personal data breach affecting Client Data;
- at the end of the Service, delete Client Data (or return it if you ask within 30 days), unless the law requires us to keep it;
- make available the information reasonably needed to show we meet these terms, and allow for reasonable audits, at your cost and on reasonable notice.
4. Sub-processors
You give general authorisation for us to use the sub-processors listed in our Privacy Policy. We will give you at least 14 days' notice of any new sub-processor, and you can object by cancelling your subscription. We impose data protection terms on each sub-processor that are no less protective than these, and remain responsible for them.
5. International transfers
We will only transfer Client Data outside the UK where a lawful transfer mechanism is in place, as described in the Privacy Policy.
6. Your obligations
You confirm you have a lawful basis for the Client Data you put into Plotwire, have given any required privacy information to the people concerned, and that your instructions to us comply with data protection law.
7. Liability
Liability under these Data Processing Terms is subject to the limits in clause 10 of the Terms of Service, except where the law does not allow it.