DETAILS OF THE PROCESSING
Subject Matter. HiO will Process Personal Data as necessary to perform the Services pursuant to the Agreement, as further instructed by Customer in its use of the Services.
Nature and Purpose of Processing.
- Performing the Agreement, this DPA and/or other contracts executed by the Parties, including, providing the Service(s) to Customer and providing support and technical maintenance, if agreed in the Agreement
- For HiO to comply with documented reasonable instructions provided by Customer where such instructions are consistent with the terms of the Agreement
- For Hio to better understand Customer’s business and improve the provision of the Services
Duration of Processing. Subject to any Section of the DPA and/or the Agreement dealing with the duration of the Processing and the consequences of the expiration or termination thereof, HiO will Process Personal Data for the duration of the Agreement, unless otherwise agreed upon in writing.
Type of Personal Data. Customer may submit Personal Data to the Services, the extent of which is determined and controlled by Customer in its sole discretion, and which may include, but is not limited to the following categories of Personal Data:
- Full name, email address, phone number, social handle, profile/nickname;
- Content of conversations, public comments on business posts, and any other Personal Data submitted via Connected Channels
- Publicly available information from Customer’s website and social media platforms;
- Any other Personal Data or information that the Customer decides to provide to the HiO or the Services.
The Customer and the Data Subjects shall provide the Personal Data to HiO by supplying the Personal Data to HiO’s Service.
For clarity, Customer shall always be deemed the “Data Controller” and HiO shall always be deemed the “Data Processor” (as such terms are defined in the GDPR).
For the avoidance of doubt, the information subject to the HiO’s privacy policy (e.g., log-in details), available here: https://hio.ai/legal/privacy-policy, shall not be subject to the terms of this DPA.
Categories of Data Subjects. Customer may submit Personal Data to the Services, the extent of which is determined and controlled by Customer in its sole discretion, and which may include, but is not limited to Personal Data relating to the following categories of data subjects:
- Customer’s customers and/or clients;
- Employees, agents, advisors, freelancers of Customer (who are natural persons);
- Prospects, Customers, business partners and vendors of Customer (who are natural persons);
- Employees or contact persons of Customer’s prospects, Customers, business partners and vendors.
The frequency of the transfer. Continuous basis.
The period for which the personal data will be retained, or, if that is not possible, the criteria used to determine that period. As described in this DPA and/or the Agreement
For transfers to (sub-) processors. As detailed in the Sub-processors List.