GDPR-ready B2B data processing terms template.
This Data Processing Addendum ("DPA") is a template for B2B customers and must be reviewed, customized, and executed by qualified legal counsel before reliance. It is not a binding agreement until signed by both parties.
"Controller" means the customer. "Processor" means DotlyMaps. "Personal Data", "Processing", and "Data Subject" have the meanings in applicable data protection law including the GDPR.
DotlyMaps processes Personal Data on behalf of the Controller solely to provide the DotlyMaps service as described in the main agreement and Controller instructions.
Process Personal Data only on documented instructions.
Ensure personnel confidentiality.
Implement appropriate technical and organizational measures.
Assist with data subject requests where feasible.
Notify Controller of personal data breaches without undue delay.
Delete or return Personal Data upon termination, subject to legal retention.
Controller authorizes DotlyMaps to engage sub-processors listed in our subprocessor register. DotlyMaps remains liable for sub-processor performance and provides notice of material changes.
Where Personal Data is transferred outside the EEA/UK, appropriate safeguards such as Standard Contractual Clauses will be implemented.
Upon reasonable request, DotlyMaps provides information necessary to demonstrate compliance and allows audits subject to confidentiality and frequency limits.