{"id":1173,"date":"2018-05-17T16:47:47","date_gmt":"2018-05-17T13:47:47","guid":{"rendered":"https:\/\/frosmo.com\/?page_id=1173"},"modified":"2026-03-26T16:15:19","modified_gmt":"2026-03-26T14:15:19","slug":"data-processing-annex","status":"publish","type":"page","link":"https:\/\/frosmo.com\/data-processing-annex\/","title":{"rendered":"Data Processing Annex"},"content":{"rendered":"
\n
Effective 2018-05-28<\/span><\/em><\/p>\n

Last updated 2026-03-26<\/em><\/p>\n

1. Applicability<\/strong><\/p>\n

1.1. THIS DATA PROCESSING ANNEX (hereinafter the \u201c<\/span>DPA<\/b>\u201d) is an amendment to the Frosmo General Terms and Conditions (the \u201c<\/span>Terms<\/b>\u201d). The Terms are an integral part of the service or subscription agreement (the \u201c<\/span>Agreement<\/b>\u201d) signed between the Customer and Frosmo (FRSM Holding Oy) (the \u201c<\/span>Parties<\/b>\u201d).<\/span><\/p>\n

1.2. This DPA defines the data protection and data security of the personal data of the Customer that is processed by Frosmo as required by the General Data Protection Regulation of the European Union (\u201c<\/span>GDPR<\/b>\u201d).<\/span><\/p>\n

1.3. This DPA replaces the entire section 10 of the Terms and is hereby incorporated as part of the Terms.<\/span><\/p>\n

1.4. This DPA shall not be applied if the Parties have signed a separate data processing agreement.<\/span><\/p>\n

1.5. In case of any discrepancy between this DPA, the Terms and the Agreement or any other appendices, the documents shall prevail in the following order: (i) this DPA, (ii) the Agreement and (iii) the Terms.<\/span><\/p><\/blockquote>\n

2. General Rights and Obligations<\/b><\/p>\n

2.1. The terms \u201c<\/span>controller<\/b>\u201d, \u201c<\/span>processor<\/b>\u201d, \u201c<\/span>processing<\/b>\u201d, \u201c<\/span>personal data<\/b>\u201d and \u201c<\/span>personal data breach<\/b>\u201d shall be understood as defined in the applicable data protection legislation, including without limitation in the GDPR. <\/span><\/p>\n

2.2. To the extent the Customer Data contains personal data, the Customer shall act as a data controller under the applicable data protection laws and regulations. As the controller, the Customer shall acquire all permits, consents, and authorizations necessary for the Services; provide necessary information to the data subjects, notifications to the relevant authorities; and draft and maintain a record of processing activities under its responsibility. The Customer shall ensure that the personal data it provides to Frosmo or allows Frosmo to collect from Customer Applications (i.e. Customers\u2019 websites) is accurate and correct.<\/span><\/p>\n

2.3. As the processor, Frosmo is entitled to process the Customer’s personal data only in compliance with this DPA, the Agreement, the Terms and the Customer’s reasonable written instructions and applicable laws and only as is necessary to provide the Services. Frosmo maintains a service description or other record of all categories of processing activities carried out on behalf of the Customer as required by the GDPR. If the Customer\u2019s written instructions regarding the processing of personal data increase the costs of Frosmo, Frosmo is entitled to charge Customer for this in accordance with its then current price list.<\/span><\/p>\n

2.4. Frosmo shall immediately inform the Customer if, in its opinion, the Customer’s instruction is against applicable data protection laws.<\/span><\/p>\n

2.5. Frosmo is entitled to use anonymous, aggregated or statistical information derived from the Services to analyse and develop its services. Such anonymous data shall not be identifiable to the Customer or data subjects.<\/span><\/p>\n

2.6. After the processing of personal data under the Agreement has expired Frosmo shall delete or return to Customer all personal data in its possession as agreed by the Parties (in Section 9 of the Terms). Frosmo is entitled to charge Customer for this work in accordance with its then current price list.<\/span><\/p><\/blockquote>\n

3. Confidentiality and Data Security<\/b><\/p>\n

3.1. Frosmo shall ensure that all persons authorised to process personal data are bound by a confidentiality obligation.<\/span><\/p>\n

3.2. To ensure data security Frosmo shall (in compliance with article 32a of the GDPR) taking into account the risks, maintain and implement appropriate technical and organizational measures as described in Frosmo\u2019s Data privacy description<\/a> and Security overview<\/a>, as amended from time-to-time by Frosmo, in line with prevalent industry practices as well as other data security measures agreed in writing with the Customer.<\/span><\/p><\/blockquote>\n

4. Other Obligations of Frosmo Related to Personal Data of Customer<\/b><\/p>\n

4.1. Frosmo shall promptly forward to the Customer any request from a data subject relating to, for example, data subject\u2019s rights to access, modify, correct, delete, or block his or her personal data, as well as any complaint about the processing of the Customer\u2019s personal data.<\/span><\/p>\n

4.2. If permitted by applicable laws, Frosmo shall direct all inquiries from data protection or other authorities to the Customer.<\/span><\/p>\n

4.3. Frosmo shall without undue delay notify the Customer if it becomes aware of any personal data breach.<\/span><\/p>\n

4.4. Frosmo shall at the Customer\u2019s written request and at the Customer\u2019s cost assist the Customer in complying with the Customer\u2019s obligations under applicable data protection or privacy laws and regulations.<\/span><\/p><\/blockquote>\n

5. Use of Subcontractors Related to Processing of Personal Data<\/b><\/p>\n

5.1. Frosmo may use sub-processors to process the personal data of the Customer in the performance of the agreed Services. Such use shall be under written contract. Frosmo shall ensure the sub-processors comply with this DPA, the Agreement and the Terms. Frosmo is liable for its sub-processor\u2019s actions as for its own.<\/span><\/p>\n

5.2. Frosmo will inform the Customer in advance on any sub-processors it intends to use for processing personal data in the agreed Services. The Customer may object to the use of any new sub-processor. If the Parties cannot agree on the use of a sub-processor, the Customer may terminate the corresponding Agreement.<\/span><\/p>\n

5.3. Frosmo and its sub-processors shall not without the Customer\u2019s written consent transfer personal data outside EU\/EEA into a territory that has not been recognized by the European Commission as ensuring an adequate level of data protection. If such transfer is consented by the Customer, Frosmo shall use appropriate mechanisms to ensure the adequate level of data protection, such as the EU standard contractual clauses. <\/span><\/p>\n

5.4. If the Parties agree on the use of services of Google, Facebook, Twitter or other named third party as a part of Services, such use and processing of personal data shall be solely subject to the contract terms and conditions of such third party. Frosmo shall not be liable for any breach of data protection or damage caused by such third party.<\/span><\/p><\/blockquote>\n

6. Audits Related to Processing of Personal Data<\/b><\/p>\n

6.1. Frosmo may engage independent external auditors to audit that the processing of personal data in its systems and Services complies with its data protection obligations. To prove compliance with its obligations, Frosmo will provide the report to the Customer. To the extent not covered by the independent audit reports, the Customer or an external auditor mandated by the Customer may audit Frosmo\u2019s compliance with the data protection obligations under the Agreement and these Terms. Frosmo\u2019s competitors shall not be qualified to audit Frosmo\u2019s performance.<\/span><\/p>\n

6.2. The Parties shall agree on the time and other details of the audit at least 14 business days before the audit. The audit shall be conducted so that the time, work, costs and the harm caused to Frosmo\u2019s business is minimized (including but not limited to any harm to Frosmo\u2019s customers, partners and vendors). Frosmo\u2019s confidentiality obligations towards third parties shall be respected. All the Customer\u2019s representatives or external auditors participating in the audit shall sign customary confidentiality agreements.<\/span><\/p>\n

6.3. Frosmo shall correct reported deficiencies without undue delay. If the audit reveals material deficiencies in Frosmo\u2019s performance, Frosmo shall bear its own costs for the audit. Otherwise all costs of the audit shall be covered by the Customer.<\/span><\/p><\/blockquote>\n

7. Liability for Damage and Administrative Fines<\/b><\/p>\n

7.1. If a data subject has suffered material or non-material damage as a result of an infringement of GDPR or this DPA, Frosmo shall be liable for the damage caused by processing of personal data only where it has not complied with obligations of GDPR specifically directed to processors or with this DPA.<\/span><\/p>\n

7.2. Each Party shall pay only the part of administrative fines imposed or damages ordered which corresponds to its part of the responsibility for the damage, as finally decided by the relevant supervisory authority or competent court authorized to impose such fines or damages.<\/span><\/p>\n

7.3. The Customer shall indemnify Frosmo against any loss or damage, which Frosmo may sustain or incur as a result of any breach by the Customer of the data protection provisions stated in this DPA.<\/span><\/p>\n

7.4. Otherwise the liabilities of the Parties are defined in Section 13 of the Terms.<\/span><\/p><\/blockquote>\n

8. Details of Processing of Personal Data as part of Frosmo\u2019s Services<\/b><\/p>\n

The Parties confirm the following details regarding the processing of personal data in connection with the Services:<\/span><\/p>\n

a) Categories of data subjects<\/b>: users or visitors of Customer websites.<\/span><\/p>\n

b) Nature and purpose of processing of personal data<\/b>: to deliver the Services to the Customer.<\/span><\/p>\n

c) Service term \/ duration of processing of personal data<\/b>: As long as the Customer acquires the Services from Frosmo and a reasonable period thereafter to comply with Section 9.3 of the Terms.<\/span><\/p>\n

d) Permitted sub-processors of Frosmo<\/b>: Hetzner Online AG, Hetzner Finland Oy and Amazon Web Services, Inc.<\/span><\/p>\n

e) Types of personal data processed<\/b>: Customer may submit personal data to the Services, the extent of which is determined and controlled by Customer in its sole discretion, and which may include, but is not limited to, the following types of personal data:<\/span><\/p>\n

Server logs<\/span> (“raw data” not collected through the Frosmo platform and not used for profiling or targeting), for example page requests, metadata (for example, timestamps) and IP addresses.<\/span><\/p>\n

Visitor data, including:<\/span><\/p><\/blockquote>\n

    \n
  1. \n
      \n
    1. Background data<\/span> (information about the visitor not related to a specific website), for example, visitor’s geolocation (on country\/region\/city level), visitor’s IP address, visitor’s device (mobile, desktop, tablet) and visitor’s browser<\/span><\/li>\n
    2. Behavior data<\/span> (visitor’s actions on the website), for example, when the visitor has visited the site, amount of time the visitor has spent on the site or a specific page, whether this is the visitor’s first visit on the site, how many times the visitor has visited the site, pages the visitor has viewed, products the visitor has viewed and which content modifications the visitor has seen or clicked.<\/span><\/li>\n
    3. Conversion and transaction data<\/span> (actions on the website related to purchases and other conversions), for example, conversions the visitor completes on the site (for example, purchases, subscriptions, reservations), products the visitor has purchased, whether the visitor is logged in, whether the visitor is a paying user and products the visitor has added in their shopping cart.<\/span><\/li>\n
    4. Account data (only collected if separately agreed with the customer in writing and for the purpose of transferring the data to marketing automation platforms, content management systems, or other third-party applications controlled by the customer), for example, name, username, email address, postal address, subscription type and wallet balance (on iGaming sites).<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n

      f) Sensitive personal data (if applicable)<\/b>: the Customer shall not send or use the Services to process any sensitive personal data.<\/span><\/p><\/blockquote>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

      Effective 2018-05-28 Last updated 2026-03-26 1. Applicability 1.1. THIS DATA PROCESSING ANNEX (hereinafter the \u201cDPA\u201d) is an amendment to the Frosmo General Terms and Conditions (the \u201cTerms\u201d). The Terms are an integral part of the service or subscription agreement (the \u201cAgreement\u201d) signed between the Customer and Frosmo (FRSM Holding Oy) (the \u201cParties\u201d). 1.2. This DPA […]<\/p>\n","protected":false},"author":4,"featured_media":0,"parent":0,"menu_order":47,"comment_status":"closed","ping_status":"closed","template":"","meta":{"content-type":"","_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"yoast_head":"\nData Processing Annex - Frosmo<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/frosmo.com\/data-processing-annex\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Data Processing Annex - Frosmo\" \/>\n<meta property=\"og:description\" content=\"Effective 2018-05-28 Last updated 2026-03-26 1. Applicability 1.1. THIS DATA PROCESSING ANNEX (hereinafter the \u201cDPA\u201d) is an amendment to the Frosmo General Terms and Conditions (the \u201cTerms\u201d). The Terms are an integral part of the service or subscription agreement (the \u201cAgreement\u201d) signed between the Customer and Frosmo (FRSM Holding Oy) (the \u201cParties\u201d). 1.2. This DPA […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/frosmo.com\/data-processing-annex\/\" \/>\n<meta property=\"og:site_name\" content=\"Frosmo\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/frosmoltd\/\" \/>\n<meta property=\"article:modified_time\" content=\"2026-03-26T14:15:19+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@Frosmo\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/frosmo.com\/data-processing-annex\/\",\"url\":\"https:\/\/frosmo.com\/data-processing-annex\/\",\"name\":\"Data Processing Annex - Frosmo\",\"isPartOf\":{\"@id\":\"https:\/\/frosmo.com\/#website\"},\"datePublished\":\"2018-05-17T13:47:47+00:00\",\"dateModified\":\"2026-03-26T14:15:19+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/frosmo.com\/data-processing-annex\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/frosmo.com\/data-processing-annex\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/frosmo.com\/data-processing-annex\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/frosmo.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Data Processing Annex\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/frosmo.com\/#website\",\"url\":\"https:\/\/frosmo.com\/\",\"name\":\"Frosmo\",\"description\":\"Frosmo is the most versatile personalization software on the market.\",\"publisher\":{\"@id\":\"https:\/\/frosmo.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/frosmo.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/frosmo.com\/#organization\",\"name\":\"Frosmo\",\"url\":\"https:\/\/frosmo.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/frosmo.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/frosmo.com\/wp-content\/uploads\/2018\/03\/Frosmo_Logo_1024x1024.jpg\",\"contentUrl\":\"https:\/\/frosmo.com\/wp-content\/uploads\/2018\/03\/Frosmo_Logo_1024x1024.jpg\",\"width\":1024,\"height\":1024,\"caption\":\"Frosmo\"},\"image\":{\"@id\":\"https:\/\/frosmo.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.instagram.com\/frosmo_\/?hl=en\",\"https:\/\/www.linkedin.com\/company\/frosmo\",\"https:\/\/www.youtube.com\/channel\/UCaKFwcHN5Ndekc5rOMSnc6w\",\"https:\/\/www.facebook.com\/frosmoltd\/\",\"https:\/\/twitter.com\/Frosmo\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Data Processing Annex - Frosmo","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/frosmo.com\/data-processing-annex\/","og_locale":"en_US","og_type":"article","og_title":"Data Processing Annex - Frosmo","og_description":"Effective 2018-05-28 Last updated 2026-03-26 1. Applicability 1.1. THIS DATA PROCESSING ANNEX (hereinafter the \u201cDPA\u201d) is an amendment to the Frosmo General Terms and Conditions (the \u201cTerms\u201d). The Terms are an integral part of the service or subscription agreement (the \u201cAgreement\u201d) signed between the Customer and Frosmo (FRSM Holding Oy) (the \u201cParties\u201d). 1.2. This DPA […]","og_url":"https:\/\/frosmo.com\/data-processing-annex\/","og_site_name":"Frosmo","article_publisher":"https:\/\/www.facebook.com\/frosmoltd\/","article_modified_time":"2026-03-26T14:15:19+00:00","twitter_card":"summary_large_image","twitter_site":"@Frosmo","twitter_misc":{"Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/frosmo.com\/data-processing-annex\/","url":"https:\/\/frosmo.com\/data-processing-annex\/","name":"Data Processing Annex - Frosmo","isPartOf":{"@id":"https:\/\/frosmo.com\/#website"},"datePublished":"2018-05-17T13:47:47+00:00","dateModified":"2026-03-26T14:15:19+00:00","breadcrumb":{"@id":"https:\/\/frosmo.com\/data-processing-annex\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/frosmo.com\/data-processing-annex\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/frosmo.com\/data-processing-annex\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/frosmo.com\/"},{"@type":"ListItem","position":2,"name":"Data Processing Annex"}]},{"@type":"WebSite","@id":"https:\/\/frosmo.com\/#website","url":"https:\/\/frosmo.com\/","name":"Frosmo","description":"Frosmo is the most versatile personalization software on the market.","publisher":{"@id":"https:\/\/frosmo.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/frosmo.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/frosmo.com\/#organization","name":"Frosmo","url":"https:\/\/frosmo.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/frosmo.com\/#\/schema\/logo\/image\/","url":"https:\/\/frosmo.com\/wp-content\/uploads\/2018\/03\/Frosmo_Logo_1024x1024.jpg","contentUrl":"https:\/\/frosmo.com\/wp-content\/uploads\/2018\/03\/Frosmo_Logo_1024x1024.jpg","width":1024,"height":1024,"caption":"Frosmo"},"image":{"@id":"https:\/\/frosmo.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.instagram.com\/frosmo_\/?hl=en","https:\/\/www.linkedin.com\/company\/frosmo","https:\/\/www.youtube.com\/channel\/UCaKFwcHN5Ndekc5rOMSnc6w","https:\/\/www.facebook.com\/frosmoltd\/","https:\/\/twitter.com\/Frosmo"]}]}},"_links":{"self":[{"href":"https:\/\/frosmo.com\/wp-json\/wp\/v2\/pages\/1173"}],"collection":[{"href":"https:\/\/frosmo.com\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/frosmo.com\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/frosmo.com\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/frosmo.com\/wp-json\/wp\/v2\/comments?post=1173"}],"version-history":[{"count":7,"href":"https:\/\/frosmo.com\/wp-json\/wp\/v2\/pages\/1173\/revisions"}],"predecessor-version":[{"id":18317,"href":"https:\/\/frosmo.com\/wp-json\/wp\/v2\/pages\/1173\/revisions\/18317"}],"wp:attachment":[{"href":"https:\/\/frosmo.com\/wp-json\/wp\/v2\/media?parent=1173"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}