This DPA forms part of the Terms between the Host (Data Fiduciary) and Klauud (Data Processor) and applies whenever Klauud processes Guest personal data on the Host's behalf.
- Roles. The Host determines the purposes and means of processing Guest data and is the Data Fiduciary; Klauud processes only as a Processor on documented instructions (these Terms + the Host's use of the Services).
- Subject matter / duration. Provision of the Services for the Subscription term.
- Nature and purpose. Hosting, storing, organising and transmitting Guest data to operate bookings, communications, invoices and records.
- Types of data. Guest name, contact details, booking/stay details, payment references, and where the Host collects them, identity documents.
- Data principals. The Host's Guests.
- Processor obligations. Klauud will: (a) process only on the Host's instructions and applicable law; (b) keep data confidential; (c) apply appropriate security (clause A4.7); (d) use sub-processors (A4.4) under equivalent obligations, notifying the Host of changes; (e) assist the Host in responding to Data Principal rights requests; (f) notify the Host without undue delay of a personal-data breach; (g) on termination, delete or return Guest data per Terms clause 14.3, save where retention is legally required; (h) make available information reasonably needed to demonstrate compliance.
- Host obligations. The Host warrants it has a lawful basis and necessary consents to collect and upload Guest data, collects only what is necessary, and honours Guest rights.
- Liability and law. Governed by the Terms (clauses 12, 17).