Data processing agreement
The short version. When you put people’s details into BigUpScreen, they stay yours. We only use them to run your shows, we keep them safe, we tell you if something goes wrong, and we delete them when you ask or when you leave.
1. Who is who
“You” is the business that holds the BigUpScreen account (the controller). “We” is BigUpScreen, a trading name of Mick Brennan, Dublin, Ireland (the processor). Words like controller, processor and personal data mean what they mean in the GDPR.
2. What it covers
- The data: personal details you or your staff add to your account and shows, for example staff and quiz host logins, visitor names and companies on a Welcome Desk, names on a gym leaderboard, speakers and guests on an event agenda, names in reviews you add, and names, pictures or video of people in what you upload.
- Why we handle it: only to store it, show it on your shows and TVs, and run the features you switch on, for as long as you have an account.
- Not covered: your own account details, and quiz players’ sign-in details, game records and email lists. We are the controller of those, as section 14 of the terms and our privacy notice explain.
3. What we promise
- We only use the data on your instructions: what you set up in the studio, and anything you ask us in writing. If we think an instruction breaks data protection law, we’ll tell you.
- Anyone who works on BigUpScreen keeps the data confidential.
- We keep it secure: everything travels over HTTPS, passwords are stored scrambled, and each account can only see its own shows and uploads.
- We help you answer people who ask to see, correct or delete their data, and with any checks or questions from a data protection authority.
- If we find a breach that affects your data, we tell you without delay, and within 48 hours, with what we know and what we’re doing about it.
- When you delete something, or close your account, we delete the data. Copies kept for safety are cleared within 60 days.
- We give you the information you reasonably need to check we keep to this agreement. Ask by email and we’ll answer within one month.
4. Other companies we use
You agree that we can use the service providers listed in our privacy notice under “Who processes it for us”, for example Cloudflare to host the service. Each is bound by a data processing agreement with the same level of protection. If we add or change one, we update that list and tell account holders by email at least 14 days before. If you object for a good reason, you can close your account before the change.
Some providers handle data outside the EEA. Where they do, the transfer is protected by the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework.
5. What you promise
- You have a lawful reason to put each person’s details on BigUpScreen, and you’ve told them, for example asking gym members before their name goes on a leaderboard.
- You don’t add sensitive data (such as health details) or data about children to your shows.
- You keep your logins, staff logins and DJ or coach links to your own team.
6. Everything else
Liability under this agreement is covered by section 13 of the terms. If this agreement and the terms disagree about personal data, this agreement wins. Irish law applies.