Skip to content

Data processing agreement and sub-processors

Effective from
Last updated

In short

This will briefly describe how Garnify, as a processor, processes the data of your clients, guests and staff on your behalf, and which sub-processors it uses.

PLACEHOLDER — summary to be approved by a lawyer

1. Parties and roles

PLACEHOLDER · legal text — to be drafted by a lawyer

This section will set out the parties’ roles in processing data.

Controller
The caterer — the business that uses Garnify.
Processor
Garnify.

2. Subject matter and duration

PLACEHOLDER · legal text — to be drafted by a lawyer

This will describe what data Garnify processes while providing the service, and for how long.

3. Data categories and data subjects

PLACEHOLDER · legal text — to be drafted by a lawyer

This will list the categories of data processed and the data subjects:

  • Clients
  • Guests
  • Staff
  • Freelance bartenders
  • Partners

4. Processor’s obligations

PLACEHOLDER · legal text — to be drafted by a lawyer

This will list Garnify’s obligations as a processor.

5. Security measures

PLACEHOLDER · legal text — to be drafted by a lawyer

This will describe the technical and organisational measures that protect the data.

6. Sub-processors

PLACEHOLDER · legal text — to be drafted by a lawyer

The table will list the sub-processors, their purpose, where the data is located and the safeguards.

  • Hosting, database and file storage

    Name
    to be confirmed
    Data location
    to be confirmed
    Safeguards
    to be confirmed
  • Email delivery

    Name
    to be confirmed
    Data location
    to be confirmed
    Safeguards
    to be confirmed
  • Chat integration

    Name
    to be confirmed
    Data location
    to be confirmed
    Safeguards
    to be confirmed
  • PDF generation

    Name
    to be confirmed
    Data location
    to be confirmed
    Safeguards
    to be confirmed
  • Analytics

    Name
    to be confirmed
    Data location
    to be confirmed
    Safeguards
    to be confirmed

7. Transfers outside the EEA

PLACEHOLDER · legal text — to be drafted by a lawyer

This will describe whether and on what basis data may be transferred outside the European Economic Area.

8. Data subject requests

PLACEHOLDER · legal text — to be drafted by a lawyer

This will describe how data subject requests are handled.

9. Incidents and notification

PLACEHOLDER · legal text — to be drafted by a lawyer

This will describe how and when data security incidents are reported.

10. Deletion or return of data

PLACEHOLDER · legal text — to be drafted by a lawyer

This will describe what happens to the data when the agreement ends: deletion or return to you.

11. Audits

PLACEHOLDER · legal text — to be drafted by a lawyer

This will describe how the controller can check that the processor complies with this agreement.

12. Contact

PLACEHOLDER · legal text — to be drafted by a lawyer

This will give contact details for data protection questions.