Last updated: 11 October 2026.
This agreement applies when you use Archade Media Manager for your business and, in doing so, have us process personal data for which you are the controller (for example the data of your team members, your customers or the audience of your profiles). You accept it together with the Terms of service. In this agreement you are the data controller and Archade Design Solutions is the data processor, under article 28 of the GDPR.
1. Subject matter and duration
We process the data only to provide the Archade Media Manager service as described in the Terms, for the duration of the contract and for the time needed to delete it after the contract ends.
2. Types of data and data subjects
Contact and login details of the people you invite; statistics and identifiers of the connected pages and accounts; post content and its results. Data subjects: your staff, customers and the audience of your channels, within the limits of the data the platforms make available.
3. Our commitments
- We process the data only according to your documented instructions, which are these terms and the settings you choose in the app.
- Anyone at our company who accesses the data is bound by confidentiality.
- We adopt appropriate security measures (art. 32 GDPR): encrypted connections, platform access keys encrypted in the database, passwords stored only as a hash, separate access per organisation, two-step verification available for every account, security headers and pages with personal data excluded from the cache, daily backups, regular server updates.
- We help you respond to data subjects’ requests and comply with the obligations of articles 32 to 36 of the GDPR.
- We notify you without undue delay, and in any case within 48 hours of becoming aware of it, of a data breach affecting your profile.
- At the end of the contract we delete the data within 30 days (backups within a further 30), unless the law requires otherwise; before that you can ask for it to be exported.
- We make available to you the information needed to demonstrate compliance with this agreement and allow reasonable audits, with at least 30 days’ notice.
4. Sub-processors
You authorise us to use the providers listed in theprivacy notice (hosting, payments, email, artificial intelligence for the Adviser). We will notify you by email at least 30 days before adding or replacing a provider: if you have reasonable grounds to object you can cancel. Each provider has data protection obligations towards us no less strict than these.
5. Transfers outside the European Union
The data is stored in Europe. If a provider processes it outside the EU, the transfer only takes place with the safeguards of the GDPR (an adequacy decision, such as the Data Privacy Framework, or standard contractual clauses).
6. Contacts
For anything concerning this agreement write to studio@archadedesign.com or to the certified email (PEC) address archadedesignsolutions@pec.it.