Business Customer Data Processing Addendum
Data processing terms for business customers.
1. Scope
This DPA applies when Canjud HR & Marketing Solutions LLC ("Processor") processes personal data on behalf of the customer ("Controller") while providing Afam Ops services.
2. Roles
For data the customer uploads or generates, the customer is the Controller and Afam Ops is the Processor. For platform operation data, Afam Ops is the Controller.
3. Processing Details
Processing is limited to providing the services described in the Terms. Categories: customer contacts, leads, financial records, communications, employee data uploaded by customer.
4. Security
Processor implements appropriate technical and organisational measures including encryption, access controls, audit logging, and backup procedures.
5. Subprocessors
Current subprocessors are listed at /legal/subprocessors. Processor will notify Controller before adding new subprocessors.
6. International Transfers
Transfers outside the EEA rely on Standard Contractual Clauses or other approved mechanisms.
7. Deletion/Return
Upon termination, Processor will delete or return personal data as instructed, subject to legal retention requirements.
8. Audits
Controller may request audit information. Processor will cooperate with reasonable audit requests.
9. Priority
This DPA takes priority over conflicting data-processing terms in the main agreement.