Data processing agreement
Our data processing agreement, which forms an annex to your service agreement with us.
Annex – Data processing agreement
Admax Hosting AB (company registration number 556605-3764)
Effective from 2025-09-17.
This data processing agreement ("the Agreement") forms an annex to, and is an integral part of, the service agreement entered into between the customer and Admax Hosting AB. The Agreement governs Admax Hosting AB's processing of personal data on the customer's behalf in accordance with the General Data Protection Regulation (GDPR).
1. Parties
Data controller: The customer.
Data processor: Admax Hosting AB (556605-3764).
2. Nature and purpose of processing
Admax Hosting AB processes personal data in order to provide the services covered by the main agreement. This includes storage, support, operations, and other related services.
3. Types of personal data and categories of data subjects
Personal data that may be processed includes names, contact details, user IDs, email addresses, IP addresses, and other data that the customer chooses to store or process via the service.
Categories of data subjects may include the customer's employees, customers, suppliers, or other individuals affected.
4. Admax Hosting AB's obligations
- Process personal data only in accordance with the customer's documented instructions.
- Ensure that authorised personnel are bound by confidentiality obligations.
- Implement appropriate technical and organisational security measures.
- Fulfil obligations in the event of a personal data breach.
- Assist the customer in fulfilling data subjects' rights.
- Provide the information necessary to demonstrate compliance with its obligations.
5. Sub-processors
Admax Hosting AB is entitled to engage sub-processors. A current list can be found in the Privacy policy. The customer will be informed of any changes and has the right to object within a reasonable time.
6. Transfers to third countries
Personal data is processed primarily within the EU/EEA. Transfers to third countries take place only where an adequate level of protection is ensured in accordance with GDPR, for example through standard contractual clauses.
7. Term
This agreement remains in force for as long as the main agreement between the parties is in effect. Upon termination, all personal data will be deleted or returned, unless retention is required by law.
8. Governing law and disputes
This agreement is governed by Swedish law. Any dispute shall be resolved by a Swedish court, with the Stockholm District Court as the court of first instance.