Data Processing Agreement — DAB Bot

This data processing agreement (Article 28 GDPR) is part of the terms of service. It applies automatically between you as the owner or admin of a Discord server ("controller") and DAB Bot (Bjorn) ("processor") once you use DAB Bot on your server.

1. Subject

The processor processes personal data of your server's members and of viewers of your connected channels, only to deliver the features you enable in Studio. The settings you choose count as your written instructions.

2. What data and whose

• Data subjects: members of your Discord server, and viewers and chatters on your connected streaming channels.
• Data: Discord and streaming IDs and names, and whatever your features process (warnings, XP, coins, birthdays, tickets and their messages, form answers, suggestions, chat log, events, song requests, etc.). See the privacy policy for the full list.
• No special categories (health, religion, …) — don't set up forms or commands that ask for them.

3. Processor obligations

• Process only on your instructions, unless the law requires otherwise (we'll tell you if so).
• Everyone with access (staff) is bound to confidentiality.
• Appropriate security: encrypted tokens and backups, HTTPS, two-factor authentication for staff, access to your server only with your one-time code.
• Help you with data subject requests (access, erasure, …) and your own GDPR obligations.
• We notify you of a breach affecting your data without undue delay, where possible within 48 hours.
• On request we provide the information you need to show this agreement is complied with.

4. Sub-processors

You give general authorisation for the sub-processors listed in the privacy policy (including Hetzner for hosting, and Discord and the streaming platforms you connect yourself). We announce new sub-processors in advance through the privacy policy; you can object at support@dabbot.eu. Transfers outside the EU only happen with the safeguards described in the privacy policy.

5. Duration and end

This agreement runs as long as the bot processes your data. You can delete data yourself in Studio. After removing the bot, on your request we erase all of the server's data within 30 days; it disappears from backups by itself within 14 days. Data we must keep by law (such as invoices) is excluded.

6. Your obligations

You make sure there is a legal basis for having your members' data processed, and inform your members (e.g. in your server rules) that you use DAB Bot, with a link to our privacy policy.

7. Contact

support@dabbot.eu — DAB Bot (Bjorn), Belgium. For everything else the terms of service apply.