Cevoriq™

Data Processing Agreement (template)

Template. The binding agreement is signed per customer. Request it at support@cevoriq.com.

1. Parties and roles

Clause text is supplied with the signed agreement.

2. Subject matter, duration, nature and purpose of the processing

Clause text is supplied with the signed agreement.

3. Categories of data subjects and personal data

See section 2, “Information We Collect”, of the Privacy Policy.

Clause text is supplied with the signed agreement.

4. Processor obligations (GDPR Art. 28(3)(a)–(h))

  • (a) Processing only on documented instructions
  • (b) Confidentiality of persons authorised to process
  • (c) Security of processing (Art. 32)
  • (d) Conditions for engaging another processor
  • (e) Assistance with data-subject requests
  • (f) Assistance with security, breach notification and impact assessments
  • (g) Deletion or return of data at the end of the service
  • (h) Information and audits to demonstrate compliance

Clause text is supplied with the signed agreement.

5. Sub-processing

The current list is published at Sub-processors.

Clause text is supplied with the signed agreement.

6. International transfers

See Data Residency for what stays in your region.

Clause text is supplied with the signed agreement.

7. Security measures

See Security.

Clause text is supplied with the signed agreement.

8. Personal data breach notification

Clause text is supplied with the signed agreement.

9. Deletion and return of data

Clause text is supplied with the signed agreement.

10. Audit rights

Clause text is supplied with the signed agreement.

11. Liability

Clause text is supplied with the signed agreement.

12. Annex IV — DORA ICT third-party provisions

For customers that are financial entities under Regulation (EU) 2022/2554 (DORA).

  • Description of the ICT services.
  • Sub-contracting chain. See Sub-processors.
  • Location of data and processing.
  • Incident reporting.
  • Exit and transition assistance.
  • Audit and access rights.
  • Termination rights.

Clause text is supplied with the signed agreement.

Annexes

  • Annex I — Details of the processing
  • Annex II — Technical and organisational measures
  • Annex III — Authorised sub-processors