1. Scope and Roles
This Data Processing Addendum (DPA) forms part of the Terms of Service between Bots For That (‘Processor’) and the Customer (‘Controller’). It governs the processing of personal data on behalf of the Customer.
2. Nature and Purpose of Processing
Bots For That processes personal data solely for the purpose of providing automation and AI services, including storage, retrieval, support, and related business operations.
3. Duration of Processing
Processing will continue for the duration of the agreement unless otherwise required by law.
4. Data Subject Types and Categories
Personal data may include names, contact details, business identifiers, system usage data, and client financial data, relating to employees, clients, or users of the Controller.
5. Security Measures
Bots For That implements appropriate technical and organisational measures to ensure data security, including encryption, access control, and incident response protocols.
6. Sub-Processors
The Processor may engage sub-processors. A current list is maintained and available to the Controller. All sub-processors are subject to equivalent data protection obligations.
7. Data Subject Rights
Bots For That will assist the Controller in fulfilling its obligations to respond to data subject rights requests under the GDPR.
8. Data Breach Notification
Bots For That shall notify the Controller without undue delay, and within 72 hours where feasible, upon becoming aware of a personal data breach.
9. Return or Deletion of Data
Upon termination of services, Bots For That will, at the Controller’s request, delete or return all personal data unless retention is required by law.
10. Audit and Inspection
The Controller may audit Bots For That’s compliance with this DPA. Reasonable access will be provided upon written request, subject to confidentiality agreements.
