Data processing agreement

This data processing agreement forms part of our terms of service and applies automatically to every organisation that uses Hellocast. The organisation is the controller; Bouwhuis IT (Hellocast) is the processor within the meaning of Article 28 of the GDPR. This is a translation of our Dutch verwerkersovereenkomst; if the two differ, the Dutch version prevails.

1. Which data

Personal data you put into Hellocast: names and birthdays (day and month) of colleagues, start dates, names of visitors, and any photos or other content in which people can be identified. The data subjects are the organisation’s employees and visitors.

2. Purpose

We process this data only to show it on the organisation’s screens and in the admin environment, and only on the organisation’s instructions.

3. Security

• Data is stored on servers in the Netherlands; backups are encrypted and stored in the EU.
• Connections are encrypted (HTTPS).
• Only authorised Hellocast staff have access, and only when needed for administration or support.
• Each organisation can only see its own data.

4. Sub-processors

We don’t use sub-processors for the content of your screens, except Anthropic when you choose to use “Design with AI” (only the description you type and the design you ask to have changed). We will notify you of new sub-processors in advance, and you may object to them.

5. Data breaches

If a data breach affects your data, we will inform you without undue delay and no later than 48 hours after discovering it, so that you can meet your own notification obligations.

6. Rights of data subjects

You can view, change and delete data yourself in Hellocast. Where necessary, we will help you handle requests from data subjects.

7. Termination

After your account is deleted, we erase the data within 30 days, including from backups as soon as they expire.

Would you like a signed copy for your records? Email hello@hellocast.app.