Data Processing Addendum

This Data Processing Addendum applies when Olyth processes personal data on behalf of a customer in connection with the services. The customer acts as controller or business, and Olyth acts as processor or service provider, as those terms apply under relevant law.

Olyth processes personal data to provide the agreed services and according to documented customer instructions, applicable agreements and legal requirements.

Customers remain responsible for the legal basis, notices, permissions and configuration choices associated with their use of the services.

Olyth uses appropriate technical and organisational safeguards designed to protect personal data, including access controls, operational monitoring and measures appropriate to the nature of the processing.

Olyth may engage subprocessors to support service delivery. Olyth remains responsible for imposing data protection obligations appropriate to their processing activities.

Where an international transfer mechanism is required, the parties will use a lawful mechanism appropriate to the transfer.

Olyth will provide reasonable assistance with data subject requests, security incidents, assessments and deletion or return of personal data, taking account of the nature of the processing and available information.

Questions about data processing can be sent to [email protected].