Data Processing Agreement (DPA) – IAether
1. Parties to the Agreement
Data Controller: The client, either a legal or natural person using IAether’s services.
Processor: IAether, an agency operated by the company Dedale (SIREN 928 090 034), located at 765 chemin de l’écluse, 31290 Renneville, France. Contact: contact@iaether.com
2. Purpose of the Agreement
This agreement defines the terms under which the processor handles personal data, including sensitive data (such as health information), on behalf of the data controller, within the scope of providing intelligent voice agents and appointment management services.
3. Nature and Purpose of the Processing
Purposes: Handling calls, managing appointments, collecting voice or text data, syncing with business tools, transmitting reasons for consultations.
Types of data processed: Name, surname, phone number, email, appointment schedules, interlocutor identities, browsing data, voice transcriptions, medical reason (if applicable).
Categories of data subjects: Patients, clients, prospects, end users.
4. Processor Obligations (IAether)
IAether agrees to:
Process data only on documented instructions from the client;
Ensure confidentiality of the data and its personnel;
Implement appropriate technical and organizational security measures;
Promptly notify the client in the event of a data breach;
Assist the client in fulfilling GDPR obligations (access, rectification, deletion, etc.);
Not subcontract without prior written authorization;
Delete or return all personal data at the end of the service, per client instructions;
Never store health data on non-compliant infrastructures (e.g., Vapi, OpenAI).
5. Data Hosting and Transfers
Health data is hosted exclusively in France on HDS-certified servers (e.g., OVH).
No sensitive data is transferred outside the EU.
Non-sensitive data may transit via providers who comply with Standard Contractual Clauses (SCCs) or equivalent certifications.
6. Audits and Inspections
The data controller may, with reasonable notice, request an audit of IAether’s implemented security measures.
7. Duration
This agreement remains in effect for as long as the client uses IAether’s services. It ends once all data has been deleted or returned in accordance with the client’s instructions.
8. Contact
For any questions regarding the processing of personal data, please contact: contact@iaether.com
Data Processing Agreement (DPA) – IAether
1. Parties to the Agreement
Data Controller: The client, either a legal or natural person using IAether’s services.
Processor: IAether, an agency operated by the company Dedale (SIREN 928 090 034), located at 765 chemin de l’écluse, 31290 Renneville, France. Contact: contact@iaether.com
2. Purpose of the Agreement
This agreement defines the terms under which the processor handles personal data, including sensitive data (such as health information), on behalf of the data controller, within the scope of providing intelligent voice agents and appointment management services.
3. Nature and Purpose of the Processing
Purposes: Handling calls, managing appointments, collecting voice or text data, syncing with business tools, transmitting reasons for consultations.
Types of data processed: Name, surname, phone number, email, appointment schedules, interlocutor identities, browsing data, voice transcriptions, medical reason (if applicable).
Categories of data subjects: Patients, clients, prospects, end users.
4. Processor Obligations (IAether)
IAether agrees to:
Process data only on documented instructions from the client;
Ensure confidentiality of the data and its personnel;
Implement appropriate technical and organizational security measures;
Promptly notify the client in the event of a data breach;
Assist the client in fulfilling GDPR obligations (access, rectification, deletion, etc.);
Not subcontract without prior written authorization;
Delete or return all personal data at the end of the service, per client instructions;
Never store health data on non-compliant infrastructures (e.g., Vapi, OpenAI).
5. Data Hosting and Transfers
Health data is hosted exclusively in France on HDS-certified servers (e.g., OVH).
No sensitive data is transferred outside the EU.
Non-sensitive data may transit via providers who comply with Standard Contractual Clauses (SCCs) or equivalent certifications.
6. Audits and Inspections
The data controller may, with reasonable notice, request an audit of IAether’s implemented security measures.
7. Duration
This agreement remains in effect for as long as the client uses IAether’s services. It ends once all data has been deleted or returned in accordance with the client’s instructions.
8. Contact
For any questions regarding the processing of personal data, please contact: contact@iaether.com