1. Parties
Customer (Controller) and iShowGbps (Processor) enter this DPA when Customer processes personal data of end users on our hosting infrastructure.
2. Subject matter
Processor hosts Customer workloads, stores backups at Customer direction, and processes personal data only on documented instructions from Customer, including configuration via the panel and API.
3. Processor obligations
Implement appropriate technical and organisational measures, assist with data subject requests where feasible, notify Customer of personal data breaches without undue delay, and ensure subprocessors are bound by equivalent terms.
4. Subprocessors
Current categories: cloud infrastructure, payment processing, email delivery, and monitoring. See our public subprocessor list. Customer may object to new subprocessors on reasonable grounds.
5. International transfers
Where data leaves the EEA, Processor relies on Standard Contractual Clauses or other lawful transfer mechanisms.
6. Term and deletion
On termination, Customer may export data via panel tools. Processor deletes remaining Customer personal data within 30 days unless law requires retention.