Last updated: 06-January-2025
This Data Processing Agreement (“DPA”) is part of the Terms of Service (“Agreement”) between Customer (“Customer,” “you,” “your”) and Get5StarReview (“the Software,” “Processor,” “we,” “our,” “us”). This DPA governs the processing of personal data that we perform on behalf of the customer in connection with the provision of the software in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
Data Controller: The entity that determines the purposes and means of the processing of personal data.
Data Processor: The entity that processes personal data on behalf of the Data Controller.
Data Subject: Any identified or identifiable individual whose personal data is processed.
Personal Data: Any information relating to an identified or identifiable individual.
Processing: Any operation or set of operations performed on personal data, such as collection, storage, use, disclosure, or erasure.
Sub-Processor: Any third party appointed by the Processor to process personal data on behalf of the Customer.
Customer as Data Controller: The customer acts as the data controller for all personal data processed through the software. The customer is responsible for determining the legal basis for processing and ensuring compliance with applicable data protection laws.
Get5StarReview as Data Processor: Get5StarReview acts as the Data Processor and processes personal data on behalf of the Customer in accordance with this DPA and the Customer’s instructions.
Get5StarReview processes the following types of personal data on behalf of the customer:
End-user data: Names, email addresses, reviews, feedback, video testimonials, and other information submitted through review requests or landing pages.
Customer data: Names, email addresses, contact information, login credentials, and other business-related data.
Usage data: IP addresses, device information, and data related to the usage of the software.
The scope of the data processed may change based on the services provided by Get5StarReview, and the customer will be informed accordingly.
Get5StarReview processes personal data for the following purposes:
Aggregating reviews from third-party platforms (e.g., Google, Facebook).
Responding to reviews via artificial intelligence on behalf of the customer.
Sending review request campaigns and processing feedback.
Sharing reviews through widgets and social media platforms.
Performing analytics to track and enhance reputation management.
Automating processes such as the sending of review requests.
The processing of personal data will continue for the duration of the agreement, unless otherwise required by law or requested by the customer for data deletion.
Get5StarReview agrees to:
Process data only under instructions from the customer: We will process personal data only as necessary to provide the Software and in accordance with the customer’s documented instructions.
Ensure confidentiality: We will ensure that all employees or contractors involved in processing personal data are subject to a duty of confidentiality.
Implement security measures: We will implement appropriate technical and organizational measures to protect personal data from unauthorized access, loss, alteration, or disclosure.
Assist the Customer: We will assist the Customer in fulfilling its obligations to respond to data subject requests and in ensuring compliance with applicable laws.
Data breach notification: In the event of a personal data breach, we will notify the customer without undue delay after becoming aware of the breach.
As Data Controller, the customer agrees to:
Provide lawful instructions: Ensure that all instructions provided to Get5StarReview are lawful and comply with applicable data protection laws.
Inform data subjects: Provide necessary privacy notices and obtain required consents where applicable.
Ensure legal basis for processing: Ensure a valid legal basis for processing personal data.
Respond to data subject requests: Handle all data subject requests related to personal data processed through the software.
Get5StarReview may engage Sub-Processors to process personal data on behalf of the customer. We will:
Ensure that any Sub-Processor provides the same level of data protection and security as required by this DPA.
Inform the customer of any intended changes concerning the addition or replacement of subprocessors.
Remain fully liable for the performance of our Sub-Processors.
A list of current subprocessors can be provided upon request.
Get5StarReview may transfer personal data to countries outside the European Economic Area (EEA). Where such transfers occur, we will ensure appropriate safeguards are in place, such as relying on Standard Contractual Clauses (SCCs).
Get5StarReview implements appropriate technical and organizational measures, including:
Encryption of personal data during transmission.
Access controls to prevent unauthorized access to data.
Regular security assessments and audits.
Incident response plans to handle data breaches.
Get5StarReview will assist the customer in ensuring compliance with data subjects’ rights, including:
Access to personal data.
Recognition of inaccurate data.
Request erasure of their data.
Restriction or objection to processing.
Data portability.
Upon termination or expiration of the agreement, Get5StarReview will, at the customer’s request:
Return all personal data processed on behalf of the Customer, or
Delete all personal data, unless retention is required by law.
The customer may request audits or inspections of Get5StarReview’s processing activities to ensure compliance with this DPA. Audits will be conducted at the customer’s cost and with reasonable notice.
Both parties agree that their liability under this DPA will be subject to the limitations and exclusions set out in the Agreement.
This DPA shall be governed by and construed in accordance with the laws of laws of England and Wales.
This DPA remains effective as long as Get5StarReview processes personal data on behalf of the customer.
If you have questions regarding this DPA or your data privacy rights, please contact us at: +44 7472 111168
Email : [email protected]
