Purpose

This Data Processing Addendum ("DPA") applies when The Data Consulting Company processes personal data on behalf of a customer under a service agreement.

Roles

Customer acts as controller (or business) and The Data Consulting Company acts as processor (or service provider), except where each party determines purposes and means independently.

Processing Instructions

We process personal data only on documented instructions from the customer, unless otherwise required by applicable law.

Security Measures

We maintain reasonable technical and organizational safeguards appropriate to the risk of processing activities and data sensitivity.

Subprocessors

We may engage subprocessors to support service delivery. Current subprocessors are listed on the Subprocessors page.

Data Subject Rights and Assistance

We provide reasonable assistance to enable customer responses to data subject requests and regulatory obligations.

Cross-Border Transfers

Where required, parties will implement lawful transfer mechanisms for international personal data transfers.

Deletion and Return

Upon termination of services and subject to legal obligations, personal data will be deleted or returned as agreed by contract.

Contact

For DPA requests, contact info@thedataconsultingcompany.com.