GDPR — article 28
This translation is provided for convenience. In the event of any discrepancy, the French version of this document prevails.
When the Client hosts personal data on our services (websites, mailboxes, databases, servers), the Client acts as controller and Artaun Hosting as processor. This agreement is part of the contract and applies automatically to every service.
Artaun only processes this data to provide the service ordered (storage, backup, transmission, security) and according to the Client's instructions given through the client area or in writing. Artaun does not look at hosted content, except at the Client's request or for security reasons.
Persons authorised to intervene are bound by confidentiality. Artaun implements appropriate measures: isolation of services, encryption of connections and secrets, control and logging of administrative access, security updates, continuous monitoring, backups depending on the plan.
The Client authorises the sub-processors required for the service: datacenter partner (France), Cloudflare (network protection of websites and panels), Amazon Web Services (relay for some emails, European Union). Any change to this list is published on this page; the Client may object by terminating the service concerned.
Artaun helps the Client, as far as possible, to respond to data subject requests and to carry out impact assessments, in particular through the client-area tools (exports, deletion, logs).
Artaun notifies the Client of any personal data breach concerning it without undue delay and at the latest 48 hours after becoming aware of it, with the information available.
At the end of the service, the Client retrieves its data during the paid period; after the grace period, the data is deleted, backups included, unless the law requires it to be kept.
Artaun makes available to the Client the information needed to demonstrate compliance with these obligations. Audit requests are sent to [email protected].
Get in touch : [email protected]
