Data Processing Addendum (DPA)
Company Information
Celko Ltd, trading as Canagon, is a company registered in Ireland under number 567083.
Registered office: 6–9 Trinity Street, D02 EY47, Dublin 2.
Canagon is a registered trade name and trademark of Celko Ltd.
Visit canagon.com/about to learn more.
We own and operate this website and other websites under the .canagon.com domain.
Purpose and scope
This Data Processing Addendum forms part of the Terms of Service Agreement between Celko Ltd (“Processor”) and the customer (“Controller”).
It applies whenever Celko Ltd processes personal data on behalf of the customer in connection with hosting, domain, DNS, email, Google Workspace, Microsoft 365, or any other service we provide.
Roles of the parties
The customer acts as the data controller.
Celko Ltd acts as the data processor when handling personal data on the customer’s behalf.
For services involving third-party products such as Google Workspace or Microsoft 365, Celko Ltd may act as a sub-processor, and those third parties’ own terms and data-protection agreements also apply.
Nature and duration of processing
Processing covers personal data stored, transmitted, or otherwise managed by the customer through our services and continues for the duration of the services until all personal data is deleted or returned in line with this Addendum.
Processor obligations
Celko Ltd will:
- process personal data only on documented instructions from the customer, unless required by law;
- implement appropriate technical and organisational measures to protect personal data from accidental or unlawful destruction, loss, alteration, or unauthorised disclosure or access;
- ensure persons authorised to process personal data are bound by confidentiality;
- notify the customer without undue delay after becoming aware of a personal-data breach;
- assist the customer, where reasonably possible, in fulfilling obligations regarding data-subject rights, impact assessments, and breach notifications;
- delete or return personal data at the end of the services, unless retention is required by law;
- make available information necessary to demonstrate compliance with this Addendum and the GDPR.
Sub-processors
The customer authorises Celko Ltd to engage sub-processors as needed for service delivery, including data-centre operators, backup providers, and third-party SaaS vendors such as Google and Microsoft.
Celko Ltd maintains a list of current sub-processors and will notify customers of material changes where required.
International transfers
If personal data is transferred outside the European Economic Area, Celko Ltd ensures that such transfers rely on an EU adequacy decision or appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.
Customer responsibilities
The customer remains responsible for ensuring it has a lawful basis for processing personal data and for the accuracy, quality, and legality of all data provided to Celko Ltd.
The customer retains full responsibility for compliance with its own obligations as controller under applicable data-protection law.
Liability and governing law
Each party’s liability under this Addendum is limited as set out in the Terms of Service Agreement.
This Addendum is governed by the laws of Ireland.
Any disputes shall fall under the exclusive jurisdiction of the Irish courts.
Contact
Questions regarding this Addendum may be submitted through form on our Contact page.