GDPR & Data Processing Agreement (DPA)

Stackhero is a European company based in France, and the General Data Protection Regulation (GDPR) is an integral part of how we design and operate our managed cloud services. This page explains, in straightforward terms, how Stackhero approaches data protection and where you can find our Data Processing Agreement.

Controller and processor

Under the GDPR, you, as our customer, are the data controller: you decide which personal data you store and process on the services you deploy with Stackhero. Stackhero acts as a data processor: we process this data on your behalf to ensure the operation of the services you use.

Data Processing Agreement (DPA)

Our Data Processing Agreement describes how Stackhero processes personal data on your behalf as a processor. This document forms part of our Terms of Service and applies automatically as soon as you use Stackhero, so there is nothing for you to sign or return.

You can download the Stackhero DPA for your records here: Download the DPA (PDF).

Where your data is hosted

Stackhero operates data centres in several regions. The data for a service is hosted in Europe only if that service is launched in a European region. You choose the region when you create the service, and this choice determines where the data is hosted.

Your data protection rights

The GDPR grants individuals rights over their personal data, such as access, rectification, portability, and erasure. As the processor, Stackhero provides you with the tools and support you need, as the controller, to respond to requests from your own users. For the personal data Stackhero holds about you as a customer, such as your account information, please refer to our Privacy Policy.

Security and certifications

Effective data protection relies on robust security. Stackhero is certified ISO 27001:2022. You can find out more on our certifications page.

Contact

For any questions regarding data protection or this page, please contact our team at privacy at stackhero dot io.

About this page

This page is provided for information purposes only. It is not a contract and does not create any obligation beyond those set out in our agreements. Our Terms of Service and the Data Processing Agreement are the binding documents, and they take precedence in the event of any discrepancy with the content of this page.