Data Processing Agreement / Fantastic Forms

1. Introduction

This Data Processing Agreement ("DPA") forms part of the Terms of Service between Fantastic Forms ("Processor") and the customer ("Controller") for the provision of form building services.

2. Definitions

Personal Data: Any information relating to an identified or identifiable natural person
Processing: Any operation performed on Personal Data
Data Subject: An identified or identifiable natural person
Sub-processor: Any processor engaged by Fantastic Forms

3. Processing of Personal Data

The Processor shall process Personal Data only on documented instructions from the Controller, including with regard to transfers of Personal Data to a third country or an international organization.

4. Security Measures

The Processor shall implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

Encryption of Personal Data
Ability to ensure ongoing confidentiality and integrity
Ability to restore availability of Personal Data
Regular testing of security measures

5. Sub-processing

The Processor shall not engage another processor without prior specific or general written authorization of the Controller. The Processor shall ensure that sub-processors are bound by the same data protection obligations as set out in this DPA.

6. Data Subject Rights

The Processor shall assist the Controller in fulfilling its obligation to respond to requests from Data Subjects exercising their rights under applicable data protection law.

7. Contact Us

For questions about this DPA, please .