This data processing agreement (the "DPA") governs Nuvid AI AB's ("the Processor") processing of personal data on behalf of the customer ("the Controller") when the Processor provides its services. The DPA forms an appendix to the main agreement between the parties.
The Processor processes personal data solely for the purpose of delivering the agreed services. The subject matter, nature, categories of data subjects and personal data are specified in an appendix.
The Processor may only process personal data on documented instructions from the Controller. If the Processor considers an instruction to infringe data protection law, the Controller shall be informed.
The Processor ensures that persons authorised to process the personal data are subject to confidentiality or an appropriate statutory duty of confidentiality.
The Processor implements appropriate technical and organisational measures, including:
The measures are described in our information security policy.
The Controller gives general prior authorisation for the Processor to engage sub-processors. The Processor imposes equivalent obligations on sub-processors and informs of planned changes so that the Controller may object. A current list is provided on request.
Taking into account the nature of the processing, the Processor assists the Controller with appropriate measures to respond to data-subject requests and to meet obligations regarding security, personal-data breaches and impact assessments.
The Processor notifies the Controller without undue delay after becoming aware of a personal-data breach and provides the information reasonably required.
Upon termination, the Processor shall, at the Controller's choice, delete or return all personal data and delete existing copies, unless storage is required by law.
The Processor makes available the information necessary to demonstrate compliance and allows for and contributes to audits.
Transfers to third countries only take place with a legal basis and appropriate safeguards under Chapter V of the GDPR, such as standard contractual clauses.
The parties' liability is governed by the main agreement and mandatory data protection law.
This is a template. A signed DPA with completed appendices is drawn up between the parties. Contact hello@nuvid.ai.