logo

Data Protection Policy

This Data Protection Policy ("DPP") is effective between [Website name] ("Data Processor") and the entity agreeing to these terms ("Data Controller "). This agreement governs the processing of personal data as part of the services provided by (website name).

DATA PROTECTION POLICY (DPP)

This DPP is an integral part of the agreement between the Data Processor and the Data Controller and outlines the terms and conditions for the processing of personal data in compliance with applicable data protection laws.

DATA CONTROLLER

The data controller is the entity that determines the purposes and means of the processing of personal data.

DATA PROCESSOR

The data processor is the entity engaged by the data controller to process personal data on their behalf.

PERSONAL DATA

"Personal Data" refers to any information relating to an identified or identifiable natural person, as defined by applicable data protection laws.

PROCESSING ACTIVITIES

Processing activities encompass any operation or set of operations performed on personal data, such as collection, recording, organization, storage, adaptation, alteration, retrieval, consultation, use, disclosure, dissemination, and erasure.

DATA SECURITY MEASURES

The data Processor shall implement appropriate technical and organizational measures to ensure the security and confidentiality of the personal data.

CONFIDENTIALITY

The data processor and its personnel shall treat personal data as confidential and shall not disclose it to unauthorized third parties.

DATA SUBJECT RIGHTS

The data processor shall assist the data controller in fulfilling its obligations to respond to data subject rights requests in accordance with applicable data protection laws.

DATA BREACH RESPONSE

In the event of a data breach, the data processor shall promptly inform the data controller and take necessary measures to mitigate the impact of the breach.

SUBPROCESSING

The data processor shall not engage sub processors without the prior written consent of the data controller. If consent is granted, the data processor shall ensure sub processors comply with data protection obligations.

INTERNATIONAL DATA TRANSFERS

Any international transfer of personal data shall be carried out in compliance with applicable data protection laws.

COMPLIANCE WITH LAWS

Both parties need to comply with all relevant data protection rules and regulations.

AUDIT RIGHTS

The data controller may, upon reasonable notice, audit the data processor's compliance with this DPP.

DATA DELETION

Upon termination of the agreement, the data processor shall, at the data controller's choice, delete or return all personal data processed under this DPP.

DATA RETENTION

The data processor shall retain personal data only for as long as necessary for the purposes specified in the agreement or as required by law.

NOTIFICATION OBLIGATIONS

The data processor shall promptly notify the data controller of any changes in applicable data protection laws that may impact the processing of personal data.

LIABILITY

At (Website name), we take full responsibility for safeguarding the personal and financial information of our users. We assure our customers that their data is protected using the latest encryption technologies and stringent security measures. However, in the event of any unforeseen data breaches or unauthorized access, we commit to promptly notifying affected users and taking immediate action to mitigate any potential damages. Our liability extends to ensuring transparency and accountability in all aspects of data handling and protection within our (Website name) platform.

INDEMNIFICATION

The data processor agrees to indemnify the data controller for any breach of data protection laws.

GOVERNING LAW

This DPP is governed by the laws of India