Data Processing Agreement

Data Processing Agreement (DPA)

By Using LaBase RendezVous you agree to and enter The Following Data Processing Agreement ("Agreement") by and between:

1. Data Controller:

- Name: [Your Company Name]

- Address: [Your Company Address]

- Email: [Your Company Email]

2. Data Processor:

- Name: LaBase RendezVous (www.labase-rendezvous.com) – PLOMA SARL

- Address: 4 rue des Champs Marteaux 37160 Descartes France

- Email: phianh@labase-rendezvous.com

3. Purpose:

The Data Processor agrees to process personal data on behalf of the Data Controller for the purpose of providing appointment scheduling services through the web app www.labase-rendezvous.com.

4. Definitions:

- "Personal Data" means any information relating to an identified or identifiable natural person.

- "Processing" means any operation or set of operations performed on personal data whether or not by automated means.

5. Duration:

This Agreement is valid as long as the Data Processor provides services to the Data Controller.

6. Data Processing Details:

- Types of Personal Data: Name, email address, phone number, company, country, appointment details.

- Categories of Data Subjects: Customers of the Data Controller.

7. Obligations of the Data Processor:

- Process the personal data only on documented instructions from the Data Controller.

- Ensure that persons authorized to process the personal data have committed themselves to confidentiality.

- Implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

- Assist the Data Controller in ensuring compliance with obligations regarding data breaches, data protection impact assessments, and prior consultations.

- At the choice of the Data Controller, delete or return all personal data after the end of the provision of services.

- Make available to the Data Controller all information necessary to demonstrate compliance with the obligations laid down in this Agreement.

8. Sub-processors:

The Data Processor shall not engage another processor without prior specific or general written authorization of the Data Controller. The Data Processor shall inform the Data Controller of any intended changes concerning the addition or replacement of other processors.

9. Data Subject Rights:

The Data Processor shall, to the extent possible, assist the Data Controller in responding to requests for exercising the data subject's rights.

10. Security Measures:

The Data Processor agrees to implement and maintain appropriate technical and organizational measures to protect personal data against unauthorized or unlawful processing and against accidental loss, destruction, damage, alteration, or disclosure.

11. Data Breach Notification:

The Data Processor shall notify the Data Controller without undue delay after becoming aware of a personal data breach.

12. Governing Law and Jurisdiction:

This Agreement shall be governed by and construed in accordance with the laws of [Jurisdiction], and any disputes arising out of or in connection with this Agreement shall be subject to the exclusive jurisdiction of the courts of [Jurisdiction].

13. Miscellaneous:

- This Agreement constitutes the entire agreement between the parties with respect to its subject matter.

- Any amendments or modifications to this Agreement must be in writing and signed by both parties.