Data Processing Agreement (DPA)

1. Purpose and Scope

This Data Processing Agreement ("DPA") forms part of the Terms of Service between you (the "Data Controller") and Cookied (the "Data Processor"). This DPA governs the processing of personal data in connection with our services.

2. Definitions

For the purposes of this DPA:

• Personal Data: Any information relating to an identified or identifiable natural person
• Processing: Any operation performed on personal data
• Data Controller: The entity that determines the purposes and means of processing
• Data Processor: The entity that processes personal data on behalf of the controller

3. Processing of Personal Data

Cookied will process personal data only:

• On documented instructions from the Data Controller
• In accordance with applicable data protection laws
• For the purposes specified in our Privacy Policy

4. Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Incident response procedures

5. Sub-processors

We may engage sub-processors to assist in providing our services. We ensure that all sub-processors are bound by data protection obligations consistent with this DPA.

6. Data Subject Rights

We will assist you in responding to requests from data subjects to exercise their rights under applicable data protection laws, including:

• Right of access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability

7. Data Breach Notification

In the event of a personal data breach, we will notify you without undue delay after becoming aware of the breach, providing information to help you meet your notification obligations.

8. Data Retention and Deletion

We will retain personal data only for as long as necessary to provide our services or as required by law. Upon termination, we will delete or return personal data in accordance with your instructions.

9. Contact

For questions about this DPA, please contact us at:

Email: dpa@cookied.io
Address: [Your Company Address]