Data Processing Agreement

Version 2.0 - Last updated: December 12, 2024

This Data Processing Agreement ("DPA") forms part of the agreement between The Slope ("Processor") and the Customer ("Controller") and reflects the parties' agreement with regard to the Processing of Personal Data.

1. Definitions and Interpretation

1.1 Definitions

  • •"Personal Data" means any information relating to an identified or identifiable person.
  • •"Processing" means any operation performed on Personal Data.
  • •"Data Controller" means the entity determining the purposes of Processing.
  • •"Data Processor" means the entity Processing Personal Data on behalf of the Controller.

2. Scope and Responsibilities

2.1 Processing Scope

  • •Email content optimization
  • •Audience engagement analysis
  • •Performance metrics calculation
  • •Campaign delivery optimization

2.2 Processor Obligations

  • •Process data only on documented instructions
  • •Ensure confidentiality commitments
  • •Implement appropriate security measures
  • •Assist with data subject requests

3. Security Measures

3.1 Technical Measures

  • •Encryption at rest and in transit
  • •Access control and authentication
  • •Regular security testing
  • •Intrusion detection and prevention

3.2 Organizational Measures

  • •Staff training and awareness
  • •Data protection policies
  • •Access management procedures
  • •Incident response plans

4. Sub-processing

4.1 Authorization

  • •General authorization for sub-processors
  • •Notice of sub-processor changes
  • •Sub-processor obligations
  • •Liability for sub-processors

5. Data Transfers

5.1 Transfer Mechanisms

  • •Standard contractual clauses
  • •Adequacy decisions
  • •Transfer impact assessments
  • •Safeguards and certifications

6. Data Subject Rights

6.1 Assistance

  • •Support for access requests
  • •Deletion and rectification
  • •Data portability
  • •Objection to processing

Current Sub-processors

NamePurposeLocation
AWSCloud InfrastructureUnited States
SendGridEmail DeliveryUnited States
MongoDB AtlasDatabase ServicesEuropean Union

Contact Information

For questions about this DPA or to exercise your rights, contact our Data Protection Officer:

Email: dpo@theslope.co

Address: 321 South 1st Street #388, Montrose, CO 81401

Company: CM Ventures Inc. (DBA The Slope)