Miydi Data Processing Addendum:

Ensuring Compliance and Protecting Your Data

Introduction:

This Data Processing Addendum (DPA) reflects Miydi’s commitment to data protection and compliance with data protection laws and regulations. It outlines the company’s obligations and responsibilities as a data processor when processing personal data on behalf of its customers.

Definitions:

Key terms in this DPA include data controller (customer), data processor (Miydi), data subject (individuals whose personal data is processed), personal data (any information relating to a data subject), and processing (any operation performed on personal data).

Roles and Responsibilities:

Miydi, as the data processor, processes personal data on behalf of its customers, who act as data controllers. Both parties have specific responsibilities to ensure compliance with data protection laws and regulations.

Data Processing Instructions:

Miydi performs specific processing activities on behalf of its customers, including but not limited to data storage, retrieval, and analysis. The purposes, duration, and nature of the processing are outlined in the customer agreement.

Data Security Measures:

Miydi implements robust technical and organizational measures to ensure the security and confidentiality of personal data, including encryption, access controls, and incident response procedures.

Sub-processors:

Miydi’s policy on engaging sub-processors requires a thorough selection process, adherence to contractual obligations, and notification to data controllers of any changes in sub-processors.

Data Transfers:

Cross-border data transfers are carried out in compliance with data protection laws, employing legal mechanisms such as standard contractual clauses and ensuring appropriate safeguards to protect personal data.

Data Subject Rights:

Miydi assists data controllers in fulfilling data subject rights requests, including access, rectification, erasure, and data portability, in accordance with data protection laws and regulations.

Audits and Inspections:

The DPA outlines the process for conducting audits and inspections to verify Miydi’s compliance with data protection laws, including the frequency of audits, the scope of inspections, and the cooperation between both parties.

Breach Notification:

In the event of a personal data breach, Miydi is obligated to notify the data controller within a specified timeframe and provide the necessary information to address the breach.

Termination and Data Deletion:

Upon termination of the agreement, Miydi is required to delete or return all personal data processed on behalf of the data controller, in accordance with the terms outlined in the DPA.

By incorporating these aspects into a legally compliant document, Miydi demonstrates its dedication to data protection and adherence to relevant laws and regulations. For any questions or concerns regarding the DPA, please visit our Contact Us page.