Data Processing Agreement

This Data Processing Agreement ("DPA") is entered into between:

Processor:

LaraBug
Nazarethsesteenweg 13
9800 Deinze
Belgium
VAT BE0740.911.734

Email: support@larabug.com
Website: https://www.larabug.com

Controller:
The natural or legal person using the LaraBug service

1. Subject

This agreement governs the processing of personal data by LaraBug on behalf of the Controller within the context of its error monitoring services.

2. Nature and Purpose of Processing

Nature: Storage and analysis of technical exception data.
Purpose: To monitor, notify, and analyze errors in the Controller’s applications.

3. Categories of Data Subjects

Data subjects may include:

End-users of the Controller’s application
Employees or contractors of the Controller

4. Categories of Personal Data

Depending on the integration, the following personal data may be processed:

Email addresses
IP addresses
User identifiers
Error-related content

Note: Sensitive data is automatically anonymized by our open-source Laravel package before storage.

5. Duration

This DPA remains in effect for the duration of the Controller’s use of LaraBug and will terminate upon deletion of the Controller’s account and data.

6. Obligations of the Processor

The Processor agrees to:

Process data only on documented instructions from the Controller
Maintain confidentiality and access control
Implement appropriate technical and organizational measures (Art. 32 GDPR)
Assist the Controller in fulfilling data subject rights
Assist in data breach notifications and impact assessments
Delete or return all data after termination
Provide documentation upon request

7. Subprocessors

The Processor may use the following subprocessors:

Hetzner Online GmbH – Hosting in Germany (EEA)
Email delivery provider (e.g. Postmark, Mailgun) – For alerting services

All subprocessors are GDPR-compliant and located within the EEA.

8. International Transfers

No personal data is transferred outside the European Economic Area (EEA).

9. Controller’s Responsibilities

The Controller agrees to:

Ensure lawful basis for all submitted data
Configure the service to minimize PII
Inform end-users of potential data collection

10. Technical and Organizational Measures

The Processor implements:

TLS encryption in transit
Server-side firewalls and authentication
Automatic anonymization via SDK
Daily backups and access logs

A full list of measures is available upon request.

11. Liability

The Processor is only liable for data processing activities that contravene this DPA or the Controller’s instructions.

12. Jurisdiction

This agreement shall be governed by Belgian law. Any disputes shall be resolved by the courts of the Processor’s registered seat.

13. Final Provisions

This DPA is an integral part of the LaraBug Terms of Service. In case of conflict, this DPA takes precedence over those Terms with respect to data processing.

Contact

Questions or concerns? Contact us at:

Email: support@larabug.com