Data Processing Agreement (DPA)

This Data Processing Agreement (“DPA”) is an addendum to the Terms of Service and governs the processing of personal data by Metanow Cloud (“Processor”) on behalf of its clients (“Controller”) in connection with the services provided at https://cloud.metanow.com.

1. Definitions

“Personal Data” means any information relating to an identified or identifiable natural person.
“Controller” means the client who determines the purposes and means of processing personal data.
“Processor” means Metanow Cloud, which processes personal data on behalf of the Controller.
“Processing” means any operation performed on personal data, such as collection, storage, use, or deletion.

2. Roles and Responsibilities

2.1 Controller Responsibilities

Ensures that the collection and use of personal data complies with applicable laws (such as GDPR).
Determines the purposes and means of processing personal data stored on Metanow Cloud hosting services.

2.2 Processor Responsibilities

Processes personal data only on documented instructions from the Controller.
Ensures that persons authorized to process data are bound by confidentiality.
Implements appropriate technical and organizational measures to secure personal data.

3. Nature and Purpose of Processing

Metanow Cloud provides hosting services for applications such as Odoo, n8n, and WordPress. Personal data may be stored, transmitted, or processed as part of hosting, backup, and support services. Processing is limited to what is necessary to deliver these services.

4. Data Security

Metanow Cloud shall implement appropriate safeguards, including:

256-bit SSL encryption for data in transit.
Firewall and malware protection via Imunify360.
Account isolation and resource controls via CloudLinux.
Physical security at Hetzner data centers.

5. Sub-Processors

The Controller authorizes Metanow Cloud to use third-party sub-processors necessary to provide services. Sub-processors currently include:

Hetzner Online GmbH (data center provider, EU-based).
Payment providers (for billing and transactions).

6. Data Transfers

All client data is stored and processed within the European Union (Germany and Finland). Metanow Cloud does not transfer data outside the EU unless explicitly requested by the Controller or required by law.

7. Data Subject Rights

Metanow Cloud shall assist the Controller, where technically possible, in fulfilling obligations related to data subject rights, including requests for access, correction, deletion, or data portability.

8. Data Breach Notification

In the event of a personal data breach, Metanow Cloud shall notify the Controller without undue delay after becoming aware of the breach, providing details of the nature of the breach and mitigation steps taken.

9. Duration and Deletion of Data

Upon termination of services, Metanow Cloud shall, at the choice of the Controller, delete all personal data from its systems or return it and then securely delete remaining copies.

10. Governing Law

This DPA is governed by the laws of the Republic of Albania, with the competent courts in Durrës, subject to applicable regulations, including the EU General Data Protection Regulation (GDPR).

11. Contact

Metanow Cloud, operated by METANOW SHPK
Email: [email protected]
Website: https://cloud.metanow.com