This Data Processing Addendum ("DPA") forms part of the Approntix Terms of Use. It applies when Approntix processes Personal Data contained in Customer Data on behalf of a tenant.
By accepting this DPA, the tenant owner confirms they are authorized to bind the tenant and instruct Approntix to process Customer Data as described below.
Roles and scope
The tenant is the controller or equivalent responsible party for Customer Data. Approntix is the processor or service provider and processes Customer Data only on the tenant's documented instructions, including use of the Service and this DPA.
Processing covers hosting, storage, retrieval, transmission, support, security, backup, and other operations necessary to provide, secure, and improve the Service.
Tenant responsibilities
The tenant is responsible for a valid legal basis, notices, consents, data-subject requests, data quality, retention decisions, and all instructions concerning Customer Data. The tenant must not instruct Approntix to process data unlawfully.
The tenant remains responsible for client data, public pages, messages, images, payment-related records, and all content entered into the Service.
Confidentiality and security
Approntix restricts Customer Data access to personnel and subprocessors with a need to know who are bound by confidentiality obligations. Approntix maintains appropriate technical and organizational measures considering the nature of processing and reasonably foreseeable risks.
The tenant must use strong credentials, assign access according to least privilege, and promptly remove access for former personnel.
Subprocessors and transfers
The tenant authorizes Approntix to use subprocessors necessary to provide the Service, including cloud hosting, security, email, messaging, payment, and support providers. Approntix remains responsible for its subprocessors' obligations relevant to Customer Data.
Where required for international transfers, the parties will cooperate in good faith to implement appropriate safeguards.
Security incidents and assistance
Approntix will notify the tenant without undue delay after confirming a personal-data breach affecting Customer Data and will provide reasonable information available to support the tenant's legal obligations.
Approntix will provide reasonable assistance, taking into account the nature of processing, for data-subject requests, impact assessments, consultations, and audits, subject to applicable law, confidentiality, and reasonable cost controls.
Deletion and precedence
Upon termination, Approntix will delete or return Customer Data according to the Terms and applicable retention requirements, unless law requires retention. This DPA prevails over conflicting data-processing terms in the Terms of Use.