Data Processing Addendum

For personal information about your customers ("Customer Personal Information"), you decide why and how it is processed, and we process it on your behalf. For information about you and your staff, we are responsible for it and our Privacy Policy applies.

We process Customer Personal Information only to provide the Service, as described in the Terms and as you direct through your use of the Service, unless the law requires otherwise. If we believe an instruction breaks the law, we will tell you.

Visits to your booking website are counted anonymously, as our Cookie Policy describes: no cookie, no IP address stored, and an identifier that resets every day and cannot be linked back to a person. We use these counts to run and improve the Service.

You are responsible for having a lawful basis to collect Customer Personal Information and to have us process it, including the notices and consents your customers are owed.

Everyone at Rentopus who can access Customer Personal Information is bound by a duty of confidentiality, and access is limited to what their work requires.

We maintain technical and organizational measures appropriate to the risk, including:

• encryption of all data in transit;
• isolation of each business's data at the database level, with automated tests that fail if any table can be reached across businesses or without signing in;
• private storage for signed documents and photos;
• secure hashing of the links sent to customers and of staff invitations;
• no collection or storage of card numbers;
• tamper evidence on signed agreements.

You authorize us to use the subprocessors listed on our subprocessors page. Each is bound by written obligations that protect Customer Personal Information at least as well as this DPA. We remain responsible for their work.

We will update the list at least 30 days before a new subprocessor starts handling Customer Personal Information. If you object on reasonable grounds, we will work with you in good faith to resolve it; if we cannot, you may close your account without penalty.

If one of your customers asks us directly to see, correct or delete their information, we will pass the request to you and not answer it ourselves unless you ask us to. The Service lets you find and update that information. For a copy, a portable export or a deletion the Service cannot do itself, write to rentopus@hotmail.com and we will do it for you within 30 days.

If we become aware of a breach of security that affects Customer Personal Information, we will notify you without undue delay, tell you what we know about it, and keep you updated as we learn more. We will help you meet any obligation you have to notify customers or authorities.

While your account is open, we delete delivery photos, messages and the evidence around a signature on the fixed schedule in our Privacy Policy §8, every day. Download anything you need to keep longer before its date.

When your account closes, you may request an export of Customer Personal Information for 30 days. After that, we delete it within 90 days, apart from copies the law requires us to keep, and copies in backups, which are overwritten on a rolling schedule and remain protected until they are.

Customer Personal Information is stored in the United States, in Virginia. Where the law requires an assessment or safeguards before information leaves your province or country, such as Quebec's Act respecting the protection of personal information in the private sector, we assess each subprocessor and bind it by written agreement, and we will give you the information you need for your own assessment.

On request, we will give you the information reasonably needed to show that we meet this DPA, such as answers to a security questionnaire. Any audit beyond that is at your cost, on reasonable notice, during business hours, and no more than once a year.

Each side's liability under this DPA is subject to the limitations in the Terms.

Questions about this DPA or requests under it: rentopus@hotmail.com. This DPA is also available in French.