Highrise Digital Ltd Data Processing Agreement

For the purposes of this agreement, any references to your “online services” means any website, application, database, email, files, cloud computing services or any other IT computer system that we (Highrise Digital) work on for you.

The agreement forms part of Highrise Digital Ltd’s terms and conditions and applies if:


Data Protection Legislation: all applicable data protection laws including General Data Protection Regulation ((EU) 2016/679) (“GDPR”) and any applicable national data protection legislation, regulations and secondary legislation from time to time in force in the jurisdiction of the Controller and/or the Processor relating to the processing of Personal Data, and where relevant the Privacy and Electronic Communications Directive (2002/58/EC) and the Privacy and Electronic Communications (EC Directive) Regulations 2003 (SI 2003/2426).

Data Protection

For the purposes of this document “you” or “your” either represent yourself if you are the data controller or the organisation you represent if it is the data controller. “We” or “us” refer to Highrise Digital Ltd.

All definitions used in this clause shall have the definition set out in the Data Protection Legislation.

The Controller and the Processor acknowledge that the Controller is the controller and the Processor is the processor and that the Controller retains control of the Personal Data and remains responsible for its compliance obligations under Data Protection Legislation. The Processor may process the Personal Data categories and Data Subject types set out in Schedule 1 of this Agreement. Each party agrees to comply with all applicable requirements of the Data Protection Legislation.

The data processor (us) shall:

Schedule 1

Personal data processing purposes and details

Subject matter of processing:

This is personal information which is stored on or in the controllers website, database, mobile or web application, IT system or any other files or database that we host.

Duration of Processing:

Below outlines the duration of the processing for the different subject matters we process data for:

Nature and Purpose of Processing:

The processor will process data for the following reasons:

Data Subject Types:

Personal Data Categories:

These may include but are not limited to:

Security Measures:

The processor will endeavour to take the following minimum security measures:

Approved sub-processors categories