Updated 2nd December 2022
1.1 The customer agreeing to these terms (?The Customer?), and Website Option Cyber Solutions as WOCSOL (?WOCSOL?), have entered into an agreement under which WOCSOL has agreed to provide hosting, data processing service, and related technical support to The Customer.
1.2 The GDPR makes written contracts between controllers and processors a general requirement. These terms are designed to ensure that processing carried out by a processor meets all the requirements of the GDPR, they reflect the agreement, in regard to the terms governing the processing and security of Customer Data, between WOCSOL and The Customer.
The following definitions will be used throughout this document.
Customer Data
means data provided by or on behalf of Customer or Customer End Users via the Services under the Account.
Customer Personal Data
means the personal data contained within the Customer Data. The terms ?personal data?, ?data subject?, ?processing?, ?controller?, ?processor? and ?supervisory authority? as used in these terms have the meanings given in the GDPR.
Data Incident
means a breach of WOCSOL security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, Customer Data on systems managed by or otherwise controlled by WOCSOL. ?Data Incidents? do not include unsuccessful attempts to compromise the security of Customer Data, including unsuccessful log-in attempts, pings, port scans, denial of service attacks, and other network attacks.
Notification Email Address
means the email address(es) designated by Customer in the Customer Control Panel, or in the Order Process to receive certain notifications from WOCSOL.
Support Ticket System
means the ticket system we use to offer technical support and communication available in your WOCSOL account support portal you will be notified via your Notification Email Address when an update is made.
Term
means the period from the Terms Effective Date until the end of WOCSOLs provision of the Services, including, if applicable, any period during which provision of the Services may be suspended and any post-termination period during which WOCSOL may continue providing the Services for transitional purposes.
These Terms will take effect on the Terms Effective Date and, even in the event of expiry of the Term, will remain in effect until, and automatically expire upon, deletion of all Customer Data by WOCSOL as described in these Terms.
The European Data Protection Legislation applies to the processing of Customer Personal Data and the parties acknowledge and agree that:
The Customer confirms that The Customer?s instructions and actions in regard to that Customer Personal Data, including its engagement of WOCSOL as another processor, have been authorised by the relevant controller under the General Data Protection Regulation.
By entering into these Terms, The Customer instructs WOCSOL to process Customer Personal Data in order to:
WOCSOL will comply with the instructions described under ?The Customer?s Instructions?.
WOCSOL will enable The Customer to delete Customer Data during the Term via instruction in writing, by phone or via the use of Customer Control Panel. Confirmation of deletion will be made in writing via support ticket. Infrastructure backups may remain on WOCSOL servers for up to 30 days after this request.
On expiry of the Term, The Customer instructs WOCSOL to delete all Customer Data (including existing copies) from WOCSOL systems. Infrastructure backups may remain on WOCSOL servers for up to 30 days after this request.
WOCSOL will implement and maintain technical and organizational measures to protect Customer Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure
WOCSOL will take appropriate steps to ensure compliance with the Security Measures by its employees, contractors and sub processors including ensuring that all persons authorised to process Customer Personal Data have committed themselves to confidentiality.
If WOCSOL becomes aware of a Data Incident, WOCSOL will:
Data Incident notifications will include details of the Data Incident including steps taken to mitigate the potential risks and steps WOCSOL recommends The Customer take to address the Data Incident.
Notifications of any data incident will be made via the Support Ticket System. Notification of a support ticket update will be sent to the Notification Email Address provided by the customer. It is the responsibility of the customer to ensure that this email address is kept current and up to date.
WOCSOL will not assess the contents of Customer Data in order to identify information subject to any specific legal requirements. The Customer is solely responsible for complying with incident notification laws applicable to The Customer and fulfilling any third party notification obligations related to any Data Incident.
Notification of or response to a Data Incident will not be construed as an acknowledgement of fault or liability.
WOCSOL will provide all information necessary to demonstrate compliance and allow for and contribute to audits, including inspections, requested by The Customer, carried out by the ICO https://ico.org.uk/
WOCSOL will inform The Customer immediately if it is asked to do something infringing the GDPR or other data protection law of the EU or a member state.
The Customer specifically authorises the engagement of WOCSOL third-party suppliers as Subprocessors. In addition, The Customer generally authorises the engagement of any other third parties as Subprocessors.
WOCSOL will provide notice via this policy of updates to the list of sub processors that are utilised or which WOCSOL proposes to utilise to deliver its Services. WOCSOL undertakes to keep this list updated regularly to enable The Customer to stay informed of the scope of subprocessing associated with the WOCSOL Services.
The Customer can object in writing to the processing of its Personal Data by a new subprocessor within thirty (30) days after updating of this policy and shall describe its legitimate reasons to object. If The Customer does not object during such time period the new subprocessor(s) shall be deemed accepted.
If The Customer objects to the use of a subprocessor pursuant to the process provided under the DPA, WOCSOL shall have the right to resolve the objection through one of the following options (to be selected at the sole discretion of WOCSOL):
The list of WOCSOL third party sub processors is maintained here.
In the case of any complaint regarding our handling of your data, our privacy policy or our adherence to it, please contact our data protection officer listed below. This individual will carry out a full investigation on your behalf in the event that you feel there is a problem.
Worldwide (English)
India (हिंदी)
Germany (German)
Czech Republic (Czech)
United Arab Emirates (Arabic)
Turkey (Türkçe)