Data Processing Agreement
Introduction
This agreement governs the processing of personal data by revzper SAS (processor) on behalf of the customer (controller).
1. Scope and Instructions
The processor shall process personal data only on written instructions provided via a secure channel and recorded in the controller's processing records. revzper SAS shall confirm receipt of instructions and document all compliance actions taken in response. The processor shall ensure that persons authorized to process personal data have committed themselves to confidentiality. The processor shall implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk. The processor shall assist the controller in ensuring compliance with obligations.
2. Post-Termination Actions
Upon termination of this Agreement or the controller's instructions, revzper SAS shall:
Default Actions
- Delete all personal data within 30 days of termination, unless otherwise instructed in writing by the controller.
- Return all personal data to the controller in a structured, commonly used, and machine-readable format, if requested in writing by the controller within 15 days of termination.
- Provide written certification to the controller confirming the completion of deletion or return, including the date and method of action.
- Allow the controller to verify compliance with this clause upon reasonable request.
Additional Obligations
- revzper SAS shall not retain any personal data beyond the completion of the above actions unless required by law.
Processing Location and Sub-processors
All processing of personal data under this Agreement takes place within the European Union. Personal data is hosted in France (Paris region) by Scaleway SAS, 8 rue de la Ville-l'Évêque, 75008 Paris, France. Payment data is processed by Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands, as an independent controller under its own terms. revzper SAS informs the controller before engaging any other sub-processor.