Data Processing Addendum

This Data Processing Addendum (“DPA”) forms part of the agreement between:

Customer (“Controller”)
and
Rad Web Hosting (“Processor”)

This DPA applies where Rad Web Hosting processes Personal Data on behalf of the Customer.

1. Scope and Applicability

   This DPA applies to all Personal Data processed by Rad Web Hosting in the course of providing hosting, cloud, infrastructure, and related services.

   This DPA is intended to satisfy:

   • Article 28 of the GDPR
   • UK GDPR requirements
   • Applicable U.S. privacy laws, including the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)

2. Definitions

   Capitalized terms not defined here shall have the meaning assigned under applicable data protection laws.

3. Details of Processing

   Subject Matter:
   Provision of web hosting, VPS, dedicated servers, networking, backup, monitoring, and support services.

   Duration:
   For the duration of the services agreement between the Customer and Rad Web Hosting.

   Nature and Purpose of Processing:

   • Data hosting and storage
   • Network transmission
   • Security monitoring
   • Backup and disaster recovery
   • Technical support and troubleshooting

   Categories of Data Subjects:

   • Customer end users
   • Website visitors
   • Employees or contractors of the Customer

   Types of Personal Data:

   • Names, email addresses, contact details
   • IP addresses and access logs
   • Website content and application data
   • Account and billing metadata

4. Processing Instructions

   Rad Web Hosting shall process Personal Data solely on documented instructions from the Customer, including as required to provide the services.

5. Confidentiality

   Rad Web Hosting ensures that persons authorized to process Personal Data are bound by confidentiality obligations.

6. Security Measures

   Rad Web Hosting implements appropriate technical and organizational measures, including:

   • Network firewalls and access controls
   • Encrypted data transmission where applicable
   • Logical separation of customer environments
   • Backup and disaster recovery procedures
   • Incident monitoring and response processes

7. Sub-Processors

   Rad Web Hosting may engage Sub-Processors (e.g., data center providers, upstream network providers, backup services).

   Rad Web Hosting shall:

   • Impose data protection obligations equivalent to this DPA
   • Maintain a list of Sub-Processors available upon request

8. International Data Transfers

   Where Personal Data is transferred outside the EEA or UK, Rad Web Hosting will ensure appropriate safeguards, such as Standard Contractual Clauses, are in place where required.

9. Data Subject Rights

   Rad Web Hosting shall assist the Customer, where technically feasible, in responding to requests to exercise data subject rights.

10. Personal Data Breach Notification

    Rad Web Hosting shall notify the Customer without undue delay after becoming aware of a personal data breach affecting Personal Data processed on the Customer’s behalf.

11. Data Retention, Deletion, and Return

    Upon termination of services:

    • Personal Data will be deleted or returned upon request
    • Backups may persist for a limited retention period consistent with operational policies and legal requirements

12. Audits and Compliance

    Upon reasonable request, Rad Web Hosting shall make available information necessary to demonstrate compliance with this DPA.

13. CCPA / CPRA Compliance

    For purposes of U.S. privacy laws:

    • Rad Web Hosting acts as a Service Provider / Processor
    • Personal Data is not sold or shared for cross-context behavioral advertising
    • Data is used solely to provide contracted services

14. Liability

    Liability under this DPA shall be subject to the limitations of liability set forth in the primary services agreement.

15. Governing Law

    This DPA shall be governed by the laws specified in Rad Web Hosting’s Terms of Service.

16. Order of Precedence

    In the event of conflict, this DPA shall prevail with respect to data protection obligations.

Contact Information:

If you have any questions or comments about this, our Data Processing Addendum, as outlined above, you can contact us:

1. By email at: dataprotection@radwebhosting.com
2. By mail at:

   RADWEB LLC
   C/O DATA PROTECTION OFFICER
   8 THE GREEN
   STE A
   DOVER, DE 19901
   UNITED STATES

3. On our website at: https://radwebhosting.com/client_area/contact.php