Trust starts with clear terms
Business Data Processing Agreement
Roles and safeguards when Hostazi hosts a business client’s personal data.
1. Roles
Hostazi is controller for account and billing processing. For data uploaded by the client, the client is controller and Hostazi processor, based on the real facts and instructions.
2. Instructions
Hostazi processes data to provide hosting, security, support, backup, transfer, and deletion. The client defines people, categories, purposes, and duration on a lawful basis.
3. Confidentiality and security
Access is limited to authorised people under confidentiality. Proportionate measures protect access, transport, logs, patching, and recovery.
4. Sub-processors
Authorised categories include datacenters, OVHcloud for France, Algerian providers for local hosting, email, support, protection, and backup. Equivalent protection duties are imposed.
5. Transfers
Algeria–France transfers follow Law 18-07 as amended and, where applicable, GDPR mechanisms. Clients select a location compatible with sector-specific obligations.
6. Assistance and rights
Where possible, Hostazi assists with rights, incidents, impact assessments, and authority requests. Work outside included support may be quoted.
7. Breach
Hostazi informs the client without undue delay after confirming a breach affecting its data. The client handles controller notifications unless law provides otherwise.
8. End of service and audit
The client exports data before closure. Data is returned or deleted under the contract and protected backup cycles. Audits remain reasonable and protect other clients.
9. Client duties
The client ensures lawfulness, notices, rights, retention, access controls, and application security. Highly sensitive data requires a written agreement and suitable safeguards.
Official references
