Data Processing Agreement

Version 2.0 - Last updated: December 12, 2024

This Data Processing Agreement ("DPA") forms part of the agreement between The Slope ("Processor") and the Customer ("Controller") and reflects the parties' agreement with regard to the Processing of Personal Data.

1. Definitions and Interpretation

1.1 Definitions

  • •"Personal Data" means any information relating to an identified or identifiable person.
  • •"Processing" means any operation performed on Personal Data.
  • •"Data Controller" means the entity determining the purposes of Processing.
  • •"Data Processor" means the entity Processing Personal Data on behalf of the Controller.

2. Scope and Responsibilities

2.1 Processing Scope

  • •Business listing information management
  • •User account and profile data
  • •Community content and interactions
  • •Event and marketplace listing data
  • •Analytics and platform usage metrics
  • •Payment and billing information (for premium services)
  • •Communication and messaging data

2.2 Processor Obligations

  • •Process data only on documented instructions
  • •Ensure confidentiality commitments from all personnel
  • •Implement appropriate technical and organizational security measures
  • •Assist with data subject requests and compliance obligations
  • •Notify Controller of any data breaches
  • •Delete or return data upon termination of services

3. Security Measures

3.1 Technical Measures

  • •Encryption at rest and in transit
  • •Access control and authentication
  • •Regular security testing
  • •Intrusion detection and prevention

3.2 Organizational Measures

  • •Staff training and awareness
  • •Data protection policies
  • •Access management procedures
  • •Incident response plans

4. Sub-processing

4.1 Authorization

  • •General authorization for sub-processors
  • •Notice of sub-processor changes
  • •Sub-processor obligations
  • •Liability for sub-processors

5. Data Transfers

5.1 Transfer Mechanisms

  • •Standard contractual clauses
  • •Adequacy decisions
  • •Transfer impact assessments
  • •Safeguards and certifications

6. Data Subject Rights

6.1 Assistance

  • •Support for access requests
  • •Deletion and rectification
  • •Data portability
  • •Objection to processing

Current Sub-processors

NamePurposeLocation
Microsoft AzureCloud Infrastructure & HostingUnited States
StripePayment ProcessingUnited States
GoogleAnalytics & Advertising ServicesUnited States
Email Service ProviderTransactional Email DeliveryUnited States

Contact Information

For questions about this DPA or to exercise your rights, contact our Data Protection Officer:

Email: dpo@theslope.co

Address: 321 South 1st Street #388, Montrose, CO 81401

Company: CM Ventures Inc. (DBA The Slope)

    The Slope | Colorado Western Slope