Data Processing Addendum

This draft notice is not an executed Data Processing Addendum. Where Prodia Systems Limited acts as processor for an approved customer, an Article 28 GDPR agreement must be incorporated into a signed contract before relevant personal-data processing begins.

The executed agreement must define the subject matter, duration, nature and purpose of processing, categories of data and data subjects, controller instructions and confidentiality obligations. Technical and organisational measures, authorised subprocessors, transfer arrangements and assistance obligations must be expressly documented.

The agreement must address rights requests, security incidents, impact assessments, audit information and return or deletion of data, subject to applicable law. Do not submit personal customer data to the public synthetic staging workspace; it is not an authorised processing service.