Where HST provides cloud based or data storage type services, in those circumstances, it likely that the personal data of, for example your employees, end users or customers (in respect of which you are a controller), is being “processed” by HST. With regard to your relationship with HST, you have two main obligations; (i) to have a contractual arrangement in place with your processor, and (ii) to be diligent about the robustness of the technical and organisational measures employed by you and your processor to protect personal data from accidental or unlawful destruction, loss, alteration or unauthorised disclosure. With regard to obligation (i), HST has pre-signed a Data Processing Addendum (“DPA”) to our standard terms and conditions, once you countersign, date it, and submit it to HST at the email address below, you will have a contract in place with your processor. With regard to obligation (ii), the statement on our website outlines the technical and organisational measures employed by HST to manage the security of data, in the context of GDPR.
