This Data Processing Agreement ("DPA") supplements the Terms of Service between MyWebdav Technologies (the "Processor") and the Customer (the "Controller") regarding the processing of personal data.
## 1. Definitions
- **Personal Data:** Any information relating to an identified or identifiable natural person
- **Processing:** Any operation performed on personal data
- **Data Subject:** The individual whose personal data is processed
## 2. Scope and Applicability
This DPA applies to all processing of personal data by the Processor on behalf of the Controller.
## 3. Processing Purposes
The Processor shall process personal data solely for the purpose of providing the Service as described in the Terms of Service.
## 4. Data Protection Obligations
### 4.1 Lawfulness
Processing shall comply with GDPR and other applicable data protection laws.
### 4.2 Security Measures
The Processor shall implement appropriate technical and organizational measures to ensure data security.
### 4.3 Confidentiality
All personnel with access to personal data shall maintain confidentiality.
## 5. Data Subject Rights
The Processor shall assist the Controller in fulfilling data subject rights requests.
## 6. Subprocessing
The Processor may engage subprocessors with prior notice to the Controller.
## 7. Data Breach Notification
The Processor shall notify the Controller of any personal data breaches without undue delay.
## 8. Data Protection Impact Assessment
The Processor shall assist with DPIAs when required.
## 9. International Data Transfers
Data transfers outside the EU shall comply with GDPR Chapter V.
## 10. Audit Rights
The Controller may audit the Processor's compliance, subject to confidentiality obligations.
## 11. Termination
Upon termination, the Processor shall delete or return all personal data.
## 12. Governing Law
This DPA is governed by the laws of the Netherlands.
## Contact Information
If you have any questions about this data processing agreement, please contact us:
