Data Processing Agreement

1. Introduction

This Data Processing Agreement ("DPA") forms part of our commitment to protect your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation ("GDPR").

2. Definitions

• "Personal Data" means any information relating to an identified or identifiable natural person
• "Processing" means any operation performed on Personal Data
• "Data Controller" means the entity determining the purposes and means of Processing Personal Data
• "Data Processor" means the entity Processing Personal Data on behalf of the Controller

3. Processing of Personal Data

We process Personal Data on your behalf as follows:

• Purpose: Providing and improving our services
• Duration: For the duration of our service agreement
• Nature: Automated and manual processing
• Type of Personal Data: Contact information, usage data, and other data you provide

4. Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data
• Regular security assessments
• Access controls and authentication
• Regular backups
• Staff training on data protection

5. Sub-processors

We may engage sub-processors to process Personal Data. We ensure that any sub-processor we engage is bound by similar obligations as those in this DPA.

6. Data Subject Rights

We assist you in fulfilling your obligations to respond to requests from data subjects exercising their rights under applicable data protection laws, including:

• Right to access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object