Data Processing Addendum

This Data Processing Addendum ("DPA") forms part of the Jitiuvi Terms of Service between Jitiuvi, Inc. ("Processor") and the Customer ("Controller").

1. Scope

This DPA applies to Processor's Processing of Personal Data on behalf of Controller in connection with the Service.

2. Roles

Controller determines the purposes and means of Processing. Processor Processes Personal Data only on documented instructions from Controller.

3. Subprocessors

Controller authorizes Processor to engage the subprocessors listed at jitiuvi.com/legal/subprocessors. Processor will provide 30 days notice of new subprocessors.

4. Security

Processor implements the technical and organizational measures described on our Security page.

5. International transfers

Where Personal Data is transferred outside the EEA/UK, the parties agree the EU Standard Contractual Clauses (Module 2) and the UK IDTA apply.

6. Data subject requests

Processor will assist Controller in responding to data subject requests, at Controller's expense where reasonable.

7. Breach notification

Processor will notify Controller without undue delay after becoming aware of a Personal Data Breach.

8. Deletion and return

On termination, Processor will delete or return Personal Data within 60 days, unless retention is required by law.

9. Audits

Processor will make available security and compliance documentation as it becomes available to satisfy reasonable audit obligations.

Contact

founder@jitiuvi.com