Data-processing agreement

Parties and subject

This agreement is between the business that registers on MopGoblin (the controller) and [Operator: legal name, registered address and company number] (MopGoblin, the processor). It covers the personal data of the business’s customers that MopGoblin processes to run the business’s booking page, bookings, quotes, photos, messages and schedule, for as long as the business uses MopGoblin.

The data: customers’ names, email addresses, phone numbers, addresses and access notes, what they ask for and agree, their messages, and their photos. The people: the business’s customers and prospective customers.

Instructions

MopGoblin processes the data only to provide the service as the business uses it, and as this agreement says.

The business instructs MopGoblin to carry out its customers’ requests to export or delete their data on its behalf: a customer downloads their data, or deletes their account, from their own account page, and MopGoblin carries it out in every business they booked with.

Security

MopGoblin keeps each business’s data apart from every other business’s, in the application and in the database, encrypts the traffic between browsers and the service, keeps photos private behind short-lived links, limits staff access to the people the business invites, and backs the database up nightly for 30 days.

Everyone at MopGoblin with access to the data is bound to confidentiality.

Sub-processors

The business agrees to these sub-processors, and MopGoblin will tell businesses before adding or replacing one, so that they can object.

Hetzner Online (Germany): the servers, the database and file storage, in the EU.

Amazon Web Services (Frankfurt region): sending email.

Cloudflare: the bot check on sign-in and registration forms (Turnstile). Cloudflare may process the check outside the EU, under the EU-US Data Privacy Framework and standard contractual clauses.

Sentry (EU region): error reports, which hold no request bodies, cookies or query strings.

Assistance and breaches

MopGoblin helps the business answer its customers’ requests and meet its own obligations, and tells the business without undue delay of any personal data breach that affects its data.

End of the agreement

When a business closes its account, MopGoblin deletes its data 30 days after closing, and its backups expire within 30 days more. Closed bookings are anonymized 3 years after closing in any case.

Questions about this agreement: [privacy contact email].