Under the website subscription, the client acts as data controller and VeryAppi (LINKYGEEK LLC) acts as data processor for data processed through the client's website (contact forms, appointment bookings, reviews).
Website hosting, collection and storage of contact and appointment requests, backups, maintenance. Data concerned: identity, contact details, content of requests from the client's website visitors. Duration: the term of the subscription contract.
Process data only on the client's documented instructions; ensure the confidentiality of authorized personnel; implement appropriate security measures (encryption in transit and at rest, restricted access, backups); assist the client with rights requests and impact assessments; notify any data breach without undue delay and at the latest within 48 hours of becoming aware of it.
Client website data is hosted in France. The use of a further sub-processor (hosting provider, transactional email service, Stripe for payments) is subject to prior notice to the client, who may object for a legitimate reason. The up-to-date list is available on request at privacy@veryappi.com.
At the end of the contract, data is returned to the client in a standard format (see the reversibility clause in the Terms and Conditions) and then deleted from our active systems within 30 days; encrypted backups expire within 90 days.
VeryAppi maintains a record of processing activity categories and provides the client with any information necessary to demonstrate compliance with Article 28 of the GDPR, limited to one documentary audit per year, at the client's expense.
This document is provided for informational purposes and must be validated by a legal professional before final contractual application.