Data Processing Agreement
This DPA forms part of any Statement of Work where Dola Tech Limited acts as processor for the client (controller), under Article 28 UK GDPR.
1. Subject matter & duration
Processing is for the purpose of delivering the engagement, for its duration plus retention periods agreed in the SOW.
2. Nature & purpose
Hosting, support, maintenance, analytics, agent operations as documented in the SOW.
3. Categories of data subjects
Client end-users, employees, contractors and customers.
4. Processor obligations
Process only on documented instructions; ensure confidentiality; implement appropriate technical and organisational measures; assist with data subject requests, DPIAs and breach notification (within 72h); delete or return data at end of engagement.
5. Sub-processors
Listed in the Sub-processor list. We give 30 days' notice of changes; controller may object on reasonable grounds.
6. Audit
Once per year on reasonable notice, or following a breach, you may audit our compliance with this DPA, subject to confidentiality.
7. International transfers
Where applicable, the UK IDTA / EU SCCs are incorporated by reference.