DATA PROCESSING ADDENDUM (DPA)
This Data Processing Addendum (“Addendum”) forms part of the agreement
(“Agreement”) between the Customer (“Controller”) and OurPlatform (“Processor”).
1. PURPOSE
The purpose of this Addendum is to ensure compliance with applicable data
protection laws, including the General Data Protection Regulation (GDPR).
2. DEFINITIONS
“Personal Data,” “Processing,” “Controller,” and “Processor” shall have the
meanings as defined under GDPR.
3. OBLIGATIONS OF THE PROCESSOR
Processor shall:
- Process Personal Data only on documented instructions from the Controller;
- Ensure confidentiality of data among authorized personnel;
- Implement appropriate security measures.
4. SUB-PROCESSORS
Processor may engage sub-processors only with prior written consent of the
Controller and shall remain fully responsible for their actions.
5. DATA SUBJECT RIGHTS
Processor shall assist the Controller in responding to data subject requests under
applicable laws.
6. DATA TRANSFERS
Transfers of Personal Data to countries outside the EEA shall be governed by
Standard Contractual Clauses or other approved mechanisms.
7. AUDIT RIGHTS
Controller has the right to conduct audits, subject to reasonable notice and
confidentiality obligations.
8. DURATION
This Addendum remains in effect as long as the Processor retains any Personal Data.
IN WITNESS WHEREOF, the parties have executed this Addendum.