Data Processing Addendum (DPA)

Last updated: 21 Aug 2025

1. Parties

This DPA forms part of the agreement between Customer (Controller) and Atrox Media(Processor), Parkowe Wzgorze 126, 32-031 Mogilany, Poland, governing the processing of personal data.

2. Subject matter and duration

Processor will process personal data to provide the services to Customer for the duration of the agreement, unless otherwise required by law.

3. Nature and purpose

Processing includes collection, storage, transmission, and analysis necessary to operate and improve the services, and to provide support and security.

4. Type of personal data and data subjects

Typical data includes account, contact, and usage information related to Customer's end users, employees, and authorized users as configured by Customer.

5. Processor obligations

  • Process personal data only on documented instructions from Customer.
  • Ensure personnel confidentiality and appropriate training.
  • Implement appropriate technical and organizational measures for security.
  • Assist Customer with data subject requests and DPIAs where applicable.
  • Delete or return personal data at termination, unless retention is required by law.

6. Subprocessors

Processor may engage subprocessors under a written agreement with equivalent data protection obligations. A list of subprocessors is available upon request. Customer will be notified of material changes as required by the main agreement.

7. International transfers

Where personal data is transferred outside the EEA/UK, Processor will ensure appropriate safeguards (e.g., standard contractual clauses) are in place.

8. Audits

Processor will make available information necessary to demonstrate compliance and will allow for audits as set forth in the agreement, subject to confidentiality.

9. Security incidents

Processor will notify Customer without undue delay after becoming aware of a personal data breach, and will provide information as it becomes available, taking reasonable steps to mitigate the effects.

10. Contact

Processor: Atrox Media, Parkowe Wzgorze 126, 32-031 Mogilany, Poland