This version has been scrubbed of any references to third parties and is custom-tailored specifically for HydraProxy. It emphasizes the specific technical nature of your service (rotating and static proxy infrastructure) while maintaining strict GDPR compliance.
Data Processing Agreement (DPA)
Last Updated: 04.08.2024
Entity: Hydra Web Services, Inc. (“HydraProxy”)
This Data Processing Agreement (“DPA”) is an integral part of the Service Agreement between HydraProxy (acting as the Processor) and the user of HydraProxy services (acting as the Controller). This document ensures that the processing of personal data by HydraProxy meets the requirements of the GDPR and other global data protection standards.
1. Definitions
- “Data Protection Laws” means the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the UK GDPR, and any other applicable data privacy laws.
- “Services” means the proxy services, including mobile, residential, and ISP proxy solutions provided via HydraProxy.com.
- “Personal Data” refers to any data processed by HydraProxy on behalf of the Customer that relates to an identified or identifiable natural person.
2. Subject Matter and Duration
- Subject Matter: The subject matter of the processing is the provision of secure, high-performance proxy infrastructure.
- Duration: Processing shall continue for the duration of the Customer’s subscription to HydraProxy services until the account is terminated and data is deleted.
3. Obligations of HydraProxy (The Processor)
HydraProxy agrees to:
- Instruction-Based Processing: Process Personal Data only on documented instructions from the Customer, including transfers of personal data to a third country.
- Confidentiality: Ensure that all employees and contractors authorized to handle data have signed strict non-disclosure and confidentiality agreements.
- Security of Processing: Implement industry-standard technical and organizational measures to protect data against unauthorized access, loss, or alteration.
- Sub-processing: Only engage sub-processors (such as server infrastructure providers) who provide sufficient guarantees to implement appropriate technical and organizational measures.
4. Scope of Data
The following categories of data may be processed during the use of HydraProxy services:
- User Metadata: IP addresses, timestamps of connections, and port usage.
- Account Data: Email addresses and billing information (processed for service management).
- Traffic Data: Technical data required to route requests through the proxy network effectively.
5. Data Subject Rights
HydraProxy shall, taking into account the nature of the processing, assist the Customer by appropriate technical and organizational measures for the fulfillment of the Customer’s obligation to respond to requests for exercising the Data Subject’s rights (e.g., access, deletion, or portability).
6. Data Breach Notification
In the event of a confirmed Personal Data breach, HydraProxy will:
- Notify the Customer without undue delay (within 48 hours) of becoming aware of the breach.
- Provide a detailed description of the nature of the breach and the measures taken to mitigate its effects.
7. International Transfers
HydraProxy ensures that for any data transferred outside the EEA/UK, adequate protections are in place, typically through the use of Standard Contractual Clauses (SCCs) or other recognized legal transfer mechanisms.
8. Termination and Deletion
Upon the termination of the service, HydraProxy shall, at the choice of the Customer, delete or return all Personal Data to the Customer, unless local or international law requires the storage of certain data (such as for tax or anti-fraud purposes).
9. Contact Information
For matters related to this DPA or privacy concerns, please reach out to our dedicated compliance team:
HydraProxy GDPR Department Email: contact@hydraproxy.com
Website: https://hydraproxy.com