// legal / dpa
Datakunata Ruray Yapay
qhipa musuqchasqa · 2026-05-07
// scope
Kay Yapayqa EGO HERO LLC (“FixWeb”, “Processor”)wan Customer (“Controller”)wan ruwasqa Terms of Service ukhunmi, hinaspa FixWeb Service quyta ruwaspa Customer sut'inpi Personal Data ruraptinmi llamk'an. Service llamk'achispa, Customer kay Yapayta chaskin.
1. Simikuna ima ninan
Kaypi mana sut'inchasqa hatun qillqayuq termsqa GDPR (Regulation (EU) 2016/679) nisqapi qusqa ninayuqmi; chaymanta, maypi ruwakun chaypi UK GDPR / Data Protection Act 2018, California Consumer Privacy Act CPRAwan allichasqa (“CCPA”), hinallataq huk suyukunapa rikch'aq kamachikuyninkuna.
“Personal Data” nisqaqa Customer apachisqan utaq Service paqarichisqan data, riqsisqa utaq riqsiy atina runata riqsichiq utaq paywan tupaq. “Sub-processor” nisqaqa kimsa kaq pihak, FixWeb sut'inpi Personal Data ruraypaq FixWeb churakusqan — /legal/privacy nisqapi listapi kachkan.
2. Ruwaykuna hinallataq kamachiykuna
Sapa pihakqa payman chayaq Data Protection Laws hunt'aymanta sapallan responsablemi. Customerqa Controller, FixWebqa kay Yapay ukhupi ruwasqa Personal Data paq Processor. FixWebqa Personal Data Customerpa documentasqa kamachiyllanman hina ruranqa (Service configuration chay kamachiy hina), kamachikuy mana hukta mañaptinqa.
3. Pakasqa kay hinallataq yaykuy
FixWebqa Personal Data ruraq autorizasqa personal pakasqa kay obligationswan watasqa kasqankuta qhawan. Production data yaykuyqa operations staffpa least-privilege huch'uy huñullanmanmi sayachisqa, audit_logs nisqapi qillqasqa, hinaspa pacha pachapi qhawasqa. FixWeb llamk'aqkuna Customer data manam yaykunkuchu, support tickets tapuy, security incidents kutichiy, utaq legal process hunt'aypaqlla.
4. Seguridad medidas
FixWebqa GDPR Art. 32 nisqawan tinkuq technical hinallataq organisational measures churakun, kaykunawan:
- Personal Data encryption transitpi (TLS 1.2+) hinallataq at restpi (database disk-level + authenticated-scan headers hinallataq OAuth tokenspaq targeted column-level AES-256-GCM);
- sapa database tablepi row-level security kallpachay — application code pantaspa ima mana organisation boundaries chimpayta atinchu read/write ruwanapaq;
- Customer social sign-in akllaptin upstream OAuth provider (Google utaq GitHub) nisqawan per-user multi-factor authentication;
- continuous static analysis + dependency scanning of the FixWeb codebase itself;
- database providerwan backups point-in-time recoverywan; watapi huk kuti yachasqa;
- defined retention periods (Privacy Policy qhaway) automated daily cronwan hunt'achisqa, mana papel promise sapallanchu.
5. Sub-processors
Customerqa FixWeb nisqata Privacy Policy nisqapi listapi kaq Sub-processors chaypi nisqa propósitospaq llamk'achiyta autoriza. FixWeb sapa Sub-processorwan qillqasqa contract ruwan, chayqa kay Yapaypi kaqkunamanta aswan pisichu data-protection obligations churan, hinaspa Personal Data processingmanta Sub-processorpa ruwayninmanta pantayninmantapas Customerman responsable kachkan.
FixWebqa Sub-processors musuq yapayta utaq reemplazota munasqanmanta Customerman (in-app notice utaq email) mana pisichu 30 p'unchaw ñawpaqta willanqa, Customer object kananpaq. Customer reasonable data-protection grounds nisqapi object kaptin, Customerqa chay affected processingmanta Service terminate ruwayta atin.
6. Internacional transferencias
FixWebqa Personal Data aswanqa United States ukhupi ruran. Personal Data EEA, UK, utaq Switzerlandmanta adequacy decision mana chaskisqa third countryman transfer kaptinqa, FixWeb kaykunapi hap'ikun:
- European Commission's Standard Contractual Clauses (Decision (EU) 2021/914), Module 2 (controller-to-processor), kay Yapayman referencewan churasqa;
- UK's International Data Transfer Addendum to the EU SCCs (utaq IDTA standalone), ICOpa willasqanman hina;
- Section 4 nisqapi willasqa supplementary technical and organisational measures.
Customerqa FixWeb nisqata Customer sut'inpi sapa onward Sub-processorwan SCCs / IDTA ruwananta autoriza.
7. Data subject derechokuna
FixWebqa Customer yanapanqa (processingpa kaynin hinallataq willakuy kachkan chayta qhawarispa) Articles 15–22 GDPR ukhupi data subject requests kutichinapaq. Aswan derechosqa Account → Privacy nisqamanta self-serve; puchuq requestspaq Customer support@fixweb.app man “Privacy request” subjectwan emailta apachiyta atin. 30 p'unchaw ukhupi kutichiyku.
8. Personal data breach
FixWebqa Customer Personal Data afectaq Personal Data breach yachaspa mana mana allin qhipakuywan (ima kaptinpas 72 horas ukhupi) Customerman willanqa, Customer Article 33 / 34 obligations hunt'anapaq razonablemente mañakusqan willakuyta quspa: breachpa kaynin, data subjects hinallataq records categorías hinaspa aproximado yupaynin, probable consecuencias, hinallataq allichanapaq taken or proposed measures.
9. Audits
FixWebqa Customerman kay Yapayta hunt'asqanta rikuchinapaq necesario willakuyta disponible ruwan: kay document, Privacy Policy, Acceptable Use Policy, Terms, hinallataq mayqan third-party security reports hap'isqayku (mañakuspa NDA ukhupi compartir ruwasaqku). FixWebqa audits, including inspections, Customer utaq Customerpa mandasqan auditor ruwasqanman haykuyninta yanapayta qunqa, reasonable advance noticewan hinaspa business hours ukhupi, calendar yearpi huk kutimanta aswan manam (regulator hukta mañaptin utaq Personal Data breach kaptinqa mana).
10. Pichay utaq kutichiy
Service tukukapti, Customerpa akllayninman hina, FixWebqa Customer sut'inpi ruwasqa Personal Data llapanta 30 p'unchaw ukhupi pichanqa utaq kutichinqa, applicable law retain ruwananta mañaptinlla (e.g. tax / billing records). Account → Privacy nisqapi self-serve account deletion flow chayta chaylla trigger ruwan.
11. CCPA yapay (California)
CCPApa propósitospaq, FixWebqa kay Yapay ukhupi ruwasqa Personal Information nisqapaq “Service Provider”, Customerqa “Business”. FixWeb manam ruwanqachu:
- Personal Information sell utaq share (CCPA ukhupi chay terms imayna definisqa chayman hina);
- Service quy business purpose específico mana kaqtinqa Personal Information retain, use, utaq disclose ruwakuy, FixWeb Customerwan direct business relationship hawapi ima;
- CCPA explicitamente permite mana kaptinqa Customer manta chaskisqa Personal Information huk source manta chaskisqa Personal Informationwan combine ruwakuy.
FixWebqa kay restrictions entiendesqanta hinaspa hunt'ananta certifica.
12. Ñawpaq kaypa orden
Kay Yapaywan Terms of Servicewan conflict kaptinqa, conflictpa tupunman hina kay Yapay prevail ruwan. SCCs / IDTA applikaptinqa iskayninmanta aswan prevail ruwan.
13. Contacto
Llapan data-protection matters, data subject rights ejerciciowan hinallataq Sub-processors tapuykunawan, EGO HERO LLCwan contactokuy:
- email: support@fixweb.app (routingpaq subject line “DPA” llamk'achiy)
- postal: hawapi emailwan mañakuspa address disponible
