Data Processing Agreement
This Data Processing Agreement ("DPA") forms part of the Terms of Service between Candour Partners and our enterprise clients. It governs how we process personal data on behalf of our customers.
1. Definitions
"Controller" means the customer who determines the purposes and means of processing personal data. "Processor" means Candour Partners. "Personal Data" means any information relating to an identified or identifiable natural person. "Processing" means any operation performed on personal data.
2. Roles and Responsibilities
The customer is the Controller. Candour Partners acts as a Processor, processing personal data only on documented instructions from the Controller, including with regard to transfers of personal data to third countries.
3. Processing Details
Subject matter: Provision of autonomous sales orchestration services.
Duration: For the term of the service agreement.
Nature and purpose: Automating CRM updates, lead enrichment, and sales workflow orchestration.
Categories of data: Contact data, sales activity data, and CRM records as provided by the Controller.
Data subjects: The Controller's customers, prospects, and sales contacts.
4. Subprocessors
We use the following categories of subprocessors to deliver our services: cloud infrastructure providers, authentication services, and analytics providers. A current list of subprocessors is available upon request.
5. Security Measures
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption, access controls, and regular security assessments.
6. Data Subject Rights
We will assist the Controller in responding to requests from data subjects to exercise their rights under applicable data protection law, including the right of access, rectification, erasure, and data portability.
7. Data Breach Notification
We will notify the Controller without undue delay after becoming aware of a personal data breach, and will cooperate with the Controller in investigating and remedying the breach.
8. Return and Deletion
Upon termination of services, we will return or delete all personal data at the Controller's choice, except where retention is required by law.
9. Contact
For questions about this DPA, contact us at dpa@candour-partners.com.