Data Processing Agreement

This Data Processing Agreement ("DPA") supplements the Terms of Service and applies where Barkhill Corporation SRL ("Processor") processes personal data on behalf of a customer ("Controller") under the GDPR.

Subject-matter and duration

The Processor processes personal data solely to provide the Services during the subscription term and any post-termination export window.

Nature and purpose

Hosting, storing and processing Controller data to deliver CRM, sales, invoicing, accounting, inventory, compliance, portal and platform features.

Types of data and data subjects

Business contact data, employee data, and any personal data the Controller chooses to upload; data subjects include Controller's employees, customers, suppliers and portal users.

Obligations of the Processor

Process personal data only on documented instructions from the Controller, ensure confidentiality of authorised staff, apply appropriate technical and organisational measures (see our Security page), assist with data subject requests, notify the Controller without undue delay of any data breach, and delete or return data at the end of the engagement.

Sub-processors

The Controller authorises the use of sub-processors listed on the current sub-processor list, updated on request. The Processor remains liable for the acts and omissions of its sub-processors.

International transfers

Where transfers outside the EEA occur, Standard Contractual Clauses adopted by the European Commission apply.

For a signed copy of this DPA under your company's legal entity, please contact legal@cenatrix.com.