Customer DPA

Introduction

This Customer Data Processing Agreement (DPA) outlines the terms and conditions for processing personal data on behalf of our customers. By engaging with 786 Services LLC, you agree to the data handling practices outlined in this agreement.

This DPA is an integral part of our Terms and Conditions and applies to all data shared through our services.

Definitions

  • Controller: The customer who determines the purposes and means of processing personal data.
  • Processor: 786 Services LLC, acting on behalf of the controller to process personal data.
  • Personal Data: Any information relating to an identifiable individual shared during the provision of services.
  • Processing: Any operation performed on personal data, such as collection, storage, or deletion.

Scope and Purpose of Data Processing

  • Purpose: 786 Services LLC processes personal data solely to provide the agreed-upon services as outlined in our contracts.
  • Instructions: We process personal data only under the documented instructions provided by the customer, except as required by law.

Obligations of 786 Services LLC

Compliance with Laws

We comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) and similar regulations.

Security Measures

786 Services LLC implements appropriate technical and organizational measures to ensure data security, including:

  • Encryption of sensitive data.
  • Regular monitoring for vulnerabilities.
  • Access control measures to restrict unauthorized access.

Confidentiality

All employees and contractors involved in processing personal data are bound by confidentiality agreements.

Sub-Processors

  • We may engage third-party sub-processors to assist with data processing.
  • A list of sub-processors is available upon request.
  • Customers will be notified of changes to sub-processors, and objections can be raised within 30 days.

Obligations of the Customer

Compliance

The customer is responsible for ensuring their collection and sharing of personal data comply with applicable laws.

Instructions

Customers must provide clear instructions for data processing and ensure these align with legal requirements.

Data Accuracy

The customer is responsible for providing accurate and up-to-date personal data.

Data Subject Rights

We assist customers in fulfilling their obligations to data subjects, including:

  • Responding to requests for access, correction, deletion, or restriction of personal data.
  • Managing objections to processing or data portability requests.
  • Promptly notifying customers of any direct data subject requests received.

Data Breach Notification

In the event of a personal data breach, 786 Services LLC will:

  • Notify the customer without undue delay upon becoming aware of the breach.
  • Provide sufficient details about the breach, including its nature, scope, and measures taken to mitigate risks.

Data Retention and Deletion

  • Personal data will be retained only for the duration necessary to fulfill the agreed-upon services or comply with legal obligations.
  • Upon termination of the services, we will delete or return personal data as requested by the customer unless legal requirements dictate otherwise.

Audits and Compliance

  • Customers have the right to audit 786 Services LLC’ data processing practices upon prior written notice.
  • Audits must be conducted during business hours and not disrupt our operations.
  • Audit costs are borne by the customer.

International Data Transfers

  • If personal data is transferred outside the customer’s jurisdiction, we ensure compliance with applicable cross-border data transfer laws, including the use of Standard Contractual Clauses (SCCs) where required.

Indemnification and Liability

  • 786 Services LLC are liable only for data processing activities under our direct control.
  • Customers agree to indemnify 786 Services LLC against claims arising from their failure to comply with applicable data protection laws or provide lawful instructions.

Changes to This Agreement

786 Services LLC reserve the right to update this DPA. Customers will be notified of material changes, and continued use of our services constitutes acceptance of the updated terms.

Contact Information

For questions about this DPA or data processing practices, contact us at:

  • Email: info@786servicesllc.com
  • Address: 16 Surrey Lane Belle Mead NJ 08502 United States of America