Data Processing Agreement

This Data Processing Agreement ("Agreement") is entered into by and between Nagaproofs ("Company") and you ("Client") and is effective as of the date you accept this Agreement.

Purpose and Scope

The purpose of this Agreement is to outline the terms and conditions under which the Company will process personal data on behalf of the Client.

Definitions

In this Agreement, the following definitions apply:

  • "Personal Data" means any information relating to an identified or identifiable natural person;
  • "Processing" means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means;
  • "Controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the Processing of Personal Data;
  • "Processor" means a natural or legal person, public authority, agency or other body which processes Personal Data on behalf of the Controller;

Obligations of the Processor

The Company shall:

  • Process Personal Data only on documented instructions from the Client, unless required to do so by Union or Member State law to which the Company is subject;
  • Ensure that persons authorized to process Personal Data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality;
  • Take all measures required pursuant to Article 32 of the GDPR;
  • Respect the conditions for engaging another processor referred to in paragraphs 2 and 4 of Article 28 of the GDPR;
  • Assist the Client in ensuring compliance with the obligations pursuant to Articles 32 to 36 of the GDPR;
  • Make available to the Client all information necessary to demonstrate compliance with the obligations laid down in this Article and allow for and contribute to audits, including inspections, conducted by the Client or another auditor mandated by the Client;

Duration and Termination

This Agreement shall commence on the date of acceptance and shall continue until the termination of the Services.

Upon termination of this Agreement, the Company shall return or delete all Personal Data processed pursuant to this Agreement, unless Union or Member State law requires storage of the Personal Data.