Scope and roles
For personal data that customers put into BigRank, the customer is the controller and Next Combinator is the processor. For account and billing data about the customer itself, we act as an independent controller as described in our Privacy Policy.
Processing instructions
We process customer personal data only to provide the service and on the customer's documented instructions, which include the agreement, the customer's settings and their use of the product. We tell the customer if we believe an instruction breaks the law.
Confidentiality
People who can access customer personal data are bound by confidentiality duties, and access is limited to those who need it to run and support the service.
Security measures
We apply technical and organizational measures suited to the risk, as summarized in our Security Policy, and we review them as the service evolves.
Sub-processors
We use sub-processors for services such as hosting, email and payments. We bind them to data protection terms that are no less protective than these, and we stay responsible for their performance.
The final version of this agreement will set out how customers can review the list of sub-processors and how changes are communicated.
Data subject requests
We help customers respond to requests from individuals to access, correct, delete or export their personal data, taking into account the nature of the processing. If we receive such a request directly, we pass it to the customer.
Breach notification
If we become aware of a personal data breach affecting customer data, we will notify the customer without undue delay and share the information we have to help them meet their own obligations.
Deletion and return
When the agreement ends, we delete customer personal data, or return it on request, unless the law requires us to keep it. The final version of this agreement will describe the available return and export options.
Contact
Questions about this agreement can be sent to hello@bigrank.si.