Data Processing Agreement

Last Updated: February 25, 2025

1. Introduction

This Data Processing Agreement ("DPA") is an integral part of the Terms and Conditions of Crayno. It governs the processing of personal data by Crayno on behalf of its users in compliance with applicable data protection laws, including GDPR.

2. Definitions

  • "Controller" refers to the user who determines the purposes and means of data processing.
  • "Processor" refers to Crayno, which processes personal data on behalf of the Controller.
  • "Personal Data" means any information relating to an identifiable natural person.
  • "Processing" means any operation performed on personal data, including collection, storage, and deletion.

3. Data Processing Responsibilities

  • Crayno processes personal data only as instructed by the Controller.
  • Data is processed lawfully, fairly, and transparently, ensuring security and confidentiality.
  • Crayno does not sell, rent, or share personal data with third parties unless required by law.

4. Security Measures

Crayno implements appropriate technical and organizational measures to ensure the security of personal data, including encryption, access controls, and data minimization practices.

5. Subprocessors

Crayno may engage subprocessors for specific services, ensuring they comply with data protection laws. A list of subprocessors is available upon request.

6. Data Subject Rights

Crayno assists the Controller in responding to data subject requests, including access, rectification, and deletion of personal data.

7. Data Breach Notification

In the event of a data breach, Crayno will notify the Controller without undue delay and provide details on mitigation measures.

8. Data Retention & Deletion

Upon termination of services, Crayno will delete or return personal data unless legally required to retain it.

9. Compliance & Audits

The Controller has the right to audit Crayno’s compliance with this DPA, subject to reasonable notice.

10. Governing Law

This DPA is governed by the laws of [Your Country/State], and any disputes shall be resolved in its jurisdiction.

11. Contact Information

For any data protection concerns, contact us at:

Email: [email protected]