Data Processing Addendum

This Data Processing Addendum ("DPA") forms part of the main agreement ("Agreement") between Expanzify Labs ("OnCliq," "we," "us," or "our") and the customer ("Customer") for the provision of services by OnCliq (the "Services") as defined in the Agreement.

1. Definitions

• Personal Data: Any information relating to an identified or identifiable natural person, as defined by applicable data protection laws
• Processing: Any operation or set of operations performed on Personal Data, such as collection, recording, organization, storage, alteration, retrieval, use, disclosure, or erasure.
• Sub-processor: Any third party engaged by OnCliq to process Personal Data on behalf of the Customer.

2. Scope and Applicability

This DPA applies whenever OnCliq processes Personal Data on behalf of the Customer in connection with the provision of the Services. This DPA is subject to the terms of the Agreement and reflects the parties' agreement regarding the processing of Personal Data.

3. Customer Responsibilities

• The Customer is responsible for ensuring that the processing of Personal Data complies with all applicable data protection laws and regulations.
• The Customer must provide clear instructions to OnCliq for the processing of Personal Data as required by applicable law.

4. OnCliq’s Obligations

• OnCliq will process Personal Data only on behalf of the Customer and in accordance with the Customer’s documented instructions, including those set forth in the Agreement and this DPA.
• OnCliq will ensure that all personnel authorised to process Personal Data are committed to confidentiality or are under an appropriate statutory obligation of confidentiality.
• OnCliq will implement and maintain appropriate technical and organisational measures to protect Personal Data against unauthorised access, loss, alteration, or disclosure.

5. Sub-processors

• OnCliq may engage Sub-processors to process Personal Data on behalf of the Customer.
• OnCliq will ensure that Sub-processors are subject to data protection obligations consistent with those outlined in this DPA.
• OnCliq remains liable for the actions and omissions of its Sub-processors.

6. Data Subject Rights

OnCliq will assist the Customer in responding to requests from data subjects exercising their rights under applicable data protection laws, including rights to access, rectification, erasure, and data portability.

7. Security Breach Management

In the event of a Personal Data breach, OnCliq will notify the Customer without undue delay after becoming aware of the breach. OnCliq will provide sufficient information to assist the Customer in meeting any obligations to report or inform data subjects of the breach.

8. Data Transfers

OnCliq will ensure that Personal Data is not transferred outside the European Economic Area (EEA) or other jurisdictions with similar restrictions unless adequate protections are in place, such as standard contractual clauses or an approved certification mechanism.

9. Audits

The Customer has the right to audit OnCliq’s compliance with this DPA, including inspecting facilities, systems, and records used to process Personal Data.

10. Termination and Deletion of Data

Upon termination of the Agreement, OnCliq will, at the Customer’s choice, return or delete all Personal Data processed on behalf of the Customer, unless required by applicable law to retain the data.

11. Governing Law

This DPA shall be governed by and construed in accordance with the laws governing the Agreement.

12. Contact Information

For any questions regarding this DPA or OnCliq’s data processing activities, please contact us at:

Email: support@oncliq.co

Last Updated: 21 Dec 2024