{"id":5357,"date":"2025-02-04T23:12:46","date_gmt":"2025-02-04T22:12:46","guid":{"rendered":"https:\/\/infopilot.ai\/data-processing-agreement\/"},"modified":"2025-02-04T23:12:46","modified_gmt":"2025-02-04T22:12:46","slug":"data-processing-agreement","status":"publish","type":"page","link":"https:\/\/infopilot.ai\/it\/data-processing-agreement\/","title":{"rendered":"Data Processing Agreement (DPA)"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Last Updated: 22.01.2025<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This <strong>Data Processing Agreement (DPA)<\/strong> is entered into between:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Reload People Ltd.<\/strong>, a company registered in England and Wales under company number [Insert Company Number], with its registered office at <strong>20-22 Wenlock Road, London, N1 7GU, United Kingdom<\/strong> (\u201cProcessor\u201d or \u201cInfoPilot.ai\u201d);<\/li>\n\n\n\n<li><strong>The Customer<\/strong> (\u201cController\u201d), which is any business or professional using InfoPilot.ai for its operations.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">This DPA is incorporated into and supplements the <strong>Terms and Conditions<\/strong> available at <a href=\"https:\/\/infopilot.ai\/terms-and-conditions\/\">https:\/\/infopilot.ai\/terms-and-conditions\/<\/a>.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">1. Purpose and Scope<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">1.1 The <strong>Controller<\/strong> engages <strong>InfoPilot.ai<\/strong> to process personal data on its behalf in connection with the services provided by <strong>InfoPilot.ai<\/strong>.<br>1.2 This DPA defines the responsibilities of both parties in relation to data protection, ensuring compliance with the <strong>UK General Data Protection Regulation (UK GDPR)<\/strong> and the <strong>Data Protection Act 2018<\/strong>.<br>1.3 The processing activities covered under this DPA include, but are not limited to:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>AI-based response automation and analytics.<\/li>\n\n\n\n<li>Automated customer support via chatbot interactions;<\/li>\n\n\n\n<li>Data collection from customer interactions;<\/li>\n\n\n\n<li>Integration with third-party communication platforms (e.g., WhatsApp, Messenger, Telegram, Zendesk);<\/li>\n<\/ul>\n\n\n\n<h4 class=\"wp-block-heading\">2. Definitions<\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Personal Data<\/strong>: Any information relating to an identified or identifiable natural person.<\/li>\n\n\n\n<li><strong>Processing<\/strong>: Any operation performed on personal data, including collection, recording, structuring, storage, retrieval, and deletion.<\/li>\n\n\n\n<li><strong>Data Controller<\/strong>: The entity that determines the purposes and means of processing personal data (the Customer).<\/li>\n\n\n\n<li><strong>Data Processor<\/strong>: The entity that processes personal data on behalf of the Controller (InfoPilot.ai).<\/li>\n\n\n\n<li><strong>Data Subject<\/strong>: Any natural person whose personal data is processed.<\/li>\n\n\n\n<li><strong>Sub-Processor<\/strong>: Any third party engaged by the Processor to assist in processing personal data.<\/li>\n<\/ul>\n\n\n\n<h4 class=\"wp-block-heading\">3. Obligations of the Processor (InfoPilot.ai)<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">InfoPilot.ai, as a <strong>Data Processor<\/strong>, agrees to:<br>3.1 Process personal data <strong>only under the documented instructions<\/strong> of the Controller.<br>3.2 Ensure that <strong>all personnel<\/strong> handling personal data are bound by confidentiality agreements.<br>3.3 Implement <strong>appropriate technical and organizational measures<\/strong> to ensure the security and integrity of the data.<br>3.4 <strong>Not use personal data for its own purposes<\/strong> or disclose it to unauthorized third parties.<br>3.5 Assist the Controller in <strong>complying with data subject rights<\/strong> (e.g., access, rectification, erasure).<br>3.6 Notify the Controller <strong>without undue delay<\/strong> in case of a personal data breach.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">4. Obligations of the Controller (Customer)<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">The Controller agrees to:<br>4.1 Ensure that the processing of personal data complies with applicable laws and that InfoPilot.ai is <strong>lawfully engaged<\/strong> as a processor.<br>4.2 Provide <strong>clear and documented instructions<\/strong> regarding data processing activities.<br>4.3 Ensure that any personal data provided to InfoPilot.ai has been lawfully collected and that data subjects have been informed about the processing.<br>4.4 Implement appropriate <strong>measures to secure personal data<\/strong> before sharing it with InfoPilot.ai.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">5. Security Measures<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">5.1 <strong>InfoPilot.ai<\/strong> implements and maintains appropriate security measures, including:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Data Encryption<\/strong>: Encrypting data in transit and at rest where applicable.<\/li>\n\n\n\n<li><strong>Access Control<\/strong>: Restricting access to personal data to authorized personnel only.<\/li>\n\n\n\n<li><strong>Data Minimization<\/strong>: Limiting data collection to what is strictly necessary for service delivery.<\/li>\n\n\n\n<li><strong>Incident Management<\/strong>: A formal process to detect, report, and respond to security incidents.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">5.2 <strong>Controller\u2019s Responsibility<\/strong>: The Controller is responsible for ensuring that it secures its own systems and access credentials to the InfoPilot.ai platform.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">6. Sub-Processing<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">6.1 The Controller authorizes <strong>InfoPilot.ai<\/strong> to engage <strong>sub-processors<\/strong> for the provision of services, provided that:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>InfoPilot.ai ensures that all sub-processors comply with <strong>the same data protection obligations<\/strong> outlined in this agreement.<\/li>\n\n\n\n<li>A list of <strong>current sub-processors<\/strong> is maintained and available upon request.<\/li>\n\n\n\n<li>The Controller is notified in advance of any changes to the list of sub-processors.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">6.2 <strong>Approved Sub-Processors<\/strong><br>InfoPilot.ai currently engages the following sub-processors:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Google Analytics<\/strong> (Website analytics)<\/li>\n\n\n\n<li><strong>Stripe<\/strong> (Payment processing)<\/li>\n\n\n\n<li><strong>Amazon Web Services (AWS)<\/strong> (Cloud hosting)<\/li>\n\n\n\n<li><strong>Google Dialogflow<\/strong> (Chatbot AI processing)<\/li>\n\n\n\n<li><strong>OpenAI<\/strong> (AI-generated responses)<\/li>\n<\/ul>\n\n\n\n<h4 class=\"wp-block-heading\">7. International Data Transfers<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">7.1 <strong>Location of Processing<\/strong>: InfoPilot.ai processes personal data in the <strong>United Kingdom and the European Economic Area (EEA)<\/strong>.<br>7.2 <strong>Transfers Outside the UK\/EEA<\/strong>: If personal data is transferred outside these jurisdictions, <strong>InfoPilot.ai ensures adequate protection<\/strong> by:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Relying on recognized <strong>adequacy decisions<\/strong> for third countries.<\/li>\n\n\n\n<li>Implementing <strong>Standard Contractual Clauses (SCCs)<\/strong> approved by the UK Information Commissioner&#8217;s Office (ICO).<\/li>\n<\/ul>\n\n\n\n<h4 class=\"wp-block-heading\">8. Data Subject Rights Assistance<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">8.1 <strong>InfoPilot.ai<\/strong> shall assist the Controller in responding to data subject requests under <strong>UK GDPR<\/strong>, including:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Right of Access, Rectification, and Erasure.<\/li>\n\n\n\n<li>Right to Data Portability.<\/li>\n\n\n\n<li>Right to Restrict Processing or Object to Processing.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">8.2 Requests must be directed to <strong><a>privacy@reloadzx.com<\/a><\/strong>, and InfoPilot.ai will provide assistance within <strong>30 days<\/strong>.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">9. Data Breach Notification<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">9.1 <strong>InfoPilot.ai<\/strong> shall notify the Controller <strong>without undue delay<\/strong> in case of a <strong>personal data breach<\/strong> affecting customer data.<br>9.2 The notification will include:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The nature of the breach.<\/li>\n\n\n\n<li>Categories and volume of affected data.<\/li>\n\n\n\n<li>Potential consequences and mitigation measures.<\/li>\n\n\n\n<li>Actions taken to address the issue.<\/li>\n<\/ul>\n\n\n\n<h4 class=\"wp-block-heading\">10. Termination and Deletion of Data<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">10.1 Upon termination of the contract, InfoPilot.ai shall:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Delete or anonymize all personal data unless required by law to retain it.<\/li>\n\n\n\n<li>Provide confirmation of deletion upon request.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">10.2 If the Controller requests the return of data before deletion, <strong>InfoPilot.ai will provide it in a structured, commonly used format<\/strong>.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">11. Governing Law and Jurisdiction<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">11.1 This DPA is governed by the laws of <strong>England and Wales<\/strong>.<br>11.2 Any disputes arising from this DPA shall be resolved in the courts of <strong>London, United Kingdom<\/strong>.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">12. Contact Information<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">For any inquiries related to this DPA, you can contact:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ud83d\udce7 <strong>Email:<\/strong> <a>privacy@reloadzx.com<\/a><br>\ud83d\udccd <strong>Address:<\/strong> Reload People Ltd., 20-22 Wenlock Road, London, N1 7GU, United Kingdom<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Last Updated: 22.01.2025 This Data Processing Agreement (DPA) is entered into between: This DPA is incorporated into and supplements the Terms and Conditions available at https:\/\/infopilot.ai\/terms-and-conditions\/. 1. Purpose and Scope 1.1 The Controller engages InfoPilot.ai to process personal data on its behalf in connection with the services provided by InfoPilot.ai.1.2 This DPA defines the responsibilities [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"inline_featured_image":false,"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"slim_seo":{"noindex":"1","title":"Data Processing Agreement (DPA) - InfoPilot.ai","description":"Last Updated: 22.01.2025 This Data Processing Agreement (DPA) is entered into between: This DPA is incorporated into and supplements the Terms and Conditions av"},"footnotes":""},"class_list":["post-5357","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/infopilot.ai\/it\/wp-json\/wp\/v2\/pages\/5357","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/infopilot.ai\/it\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/infopilot.ai\/it\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/infopilot.ai\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/infopilot.ai\/it\/wp-json\/wp\/v2\/comments?post=5357"}],"version-history":[{"count":0,"href":"https:\/\/infopilot.ai\/it\/wp-json\/wp\/v2\/pages\/5357\/revisions"}],"wp:attachment":[{"href":"https:\/\/infopilot.ai\/it\/wp-json\/wp\/v2\/media?parent=5357"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}