Data processing agreement

Roles

Your company is the controller of the personal data in its records. IXXO Cart Ltd is the processor and acts only on your documented instructions: these terms, and what you do in OnPraxia. We tell you if we think an instruction breaks the law.

What is processed

Purpose: providing OnPraxia for as long as your account lasts, and until its records are deleted. People concerned: your staff, customers, suppliers, clients and their contacts. Data: names, contact and company details, invoices, bills, payments, documents, and payroll and HR records if you use them, which can include identity numbers and health-related absence records.

Confidentiality and security

Our staff are bound to confidentiality and reach your data only when needed to provide or support the service. We use encrypted connections, a second sign-in factor for staff, separation between companies, access records and daily backups, and we review these measures as risks change.

Sub-processors

You allow us to use these sub-processors, on terms that protect your data as this agreement does: Amazon Web Services EMEA (e-mail, Frankfurt), Google Firebase (notifications to Android phones) and Apple (notifications to iPhones). A provider your company chooses to connect, such as a payment gateway, works for you under its own terms.

We tell you at least 30 days before adding or replacing one, here and by e-mail, so that you can object. If we cannot resolve an objection, you can close your account.

Where data goes

Your records stay in the European Union. Notifications to phones pass through Google and Apple, which may handle them outside the EU under their own transfer safeguards, so we keep their text general.

Helping you

We help you answer requests from the people concerned, and with security, impact assessments and dealing with supervisory authorities, as far as your use of OnPraxia makes that necessary.

If a personal data breach affects your data, we tell you without undue delay, with what we know and what we are doing about it.

At the end

When your account ends, you can export your records for 90 days. We then keep them read-only only for as long as the law requires, and delete them after that, including from backups as those age out.

Checks

We give you the information needed to show that we meet this agreement. You can audit us on reasonable notice, at your cost, in a way that protects other customers' data. If this agreement and the terms of service conflict on personal data, this agreement applies.