Data processing agreements

Two roles

When personal data is processed there are two roles. The controller decides why and how the data is processed, must have a legal basis for the processing and must inform the people concerned. The processor processes the data on the controller’s behalf, according to the controller’s instructions, and is responsible for technical and organisational security measures.

Rackfish is the processor for what you store in our services

You as a customer are responsible for the personal data you store or process in our services, for example on a website, in email, on a server or in Streamio. Rackfish is then your processor. You decide which data is collected, have the legal basis and inform the people registered.

Rackfish is the controller for data about you as a customer

When we process data about you as a customer, contact person or visitor to our websites, Rackfish is the controller. How we do that is described in our privacy policy.

TechSverige’s data processing agreement for all services

For all our services, TechSverige’s Special Terms and Conditions for the Processing of Personal Data apply together with Rackfish’s specification. The agreement covers, among other things, subprocessors, security level, confidentiality, audits and deletion when the agreement ends. The specification describes the processing for each service and lists our subprocessors and the countries where processing takes place. We have data processing agreements with all our subprocessors. Logged-in customers find the documents under Agreements and terms at my.rackfish.com. Others can request them via the form at rackfish.com/en/legal.

Can we use our own data processing agreement?

For our standard services we do not sign customers’ own data processing agreements. The services are the same for all customers, and we cannot assess and comply with different terms for hundreds of customers in the same standardised service. Standard services are also highly competitive, and legal review and negotiation of individual agreements does not fit within the price.

You always have the right to give instructions on how your personal data is to be processed. If laws or regulations give you requirements that the standard agreement does not meet, contact us and describe exactly what differs, and we will find a solution. This usually requires a customised service with customised terms and pricing. Legal review of your own agreement is normally charged separately.

Questions: support@rackfish.com or contact us via rackfish.com.