Data processing agreement

This agreement forms part of the terms of service between the author (“controller”) and [Lanternbee legal entity — to be completed] (“processor”). It applies to personal data of readers that Lanternbee processes to run the author’s store.

1. Subject and duration

Lanternbee processes readers’ personal data to provide the store, checkout, delivery, reader library, reviews and email tools, for as long as the author uses Lanternbee and until the data is deleted under section 8.

2. Data and people

• People: buyers, newsletter subscribers and visitors of the author’s store.
• Data: name, email address, order history, library and download records, Kindle address, marketing consent with its date and source, reviews, IP addresses in security logs.
• No special categories of data are processed.

3. Instructions

Lanternbee processes the data only on the author’s documented instructions, which are these terms and the author’s use of the admin, unless the law requires otherwise; it will tell the author if an instruction appears to break data protection law.

4. Confidentiality and security

Staff with access are bound to confidentiality. Lanternbee keeps appropriate technical and organisational measures, including: encryption in transit (TLS) on every connection, including inside our network; encryption of stored secrets; least-privilege database roles; two-step sign-in for authors; access logs and audited support access; backups and tested restores; and masking of email addresses in logs.

5. Sub-processors

The author authorises these sub-processors: Hetzner Online GmbH (hosting, Germany), Cloudflare, Inc. (network and storage, EU jurisdiction buckets), Stripe (payments and tax), Amazon Web Services EMEA SARL (email delivery, EU region), Better Stack (uptime monitoring, no reader data). Lanternbee will give at least 30 days’ notice of a new sub-processor; the author may object and close the account if the objection cannot be resolved.

6. Helping the author

Lanternbee helps the author answer readers’ requests (access, export, correction, erasure): readers can export and delete their data themselves, and authors can export readers and erase a reader from the admin. Lanternbee also helps with security, breach notification and impact assessments where needed.

7. Breaches

Lanternbee notifies the author without undue delay, and within 48 hours of becoming aware, of a personal data breach affecting their readers, with the information it has.

8. Deletion

When the author closes the store, Lanternbee deletes readers’ data within 90 days, except where the law requires keeping it (for example invoices). Erasures are recorded so they survive backup restores.

9. Transfers

Data is stored in the EU. Transfers outside the EEA or UK to sub-processors are covered by standard contractual clauses or adequacy decisions.

10. Audits

Lanternbee makes available the information needed to show compliance and allows reasonable audits, with notice, at the author’s cost.