Data Processing Agreement (DPA)

Parties & Roles

• Controller: The client who determines the purposes and means of processing personal data.
• Processor: Visoniq TechCore Private Limited, providing development and technical GDPR services strictly on the documented instructions of the Controller.

Purpose & Nature of Processing

Processing is limited to designing, deploying, and maintaining web applications, analytics, and related integrations as described in each Statement of Work. Personal data types typically include site visitor information, account records provided by the Controller, and operational logs necessary for debugging or support.

Subprocessors

Current subprocessors are published on our Subprocessor List. We will provide advance notice of changes and allow Controllers to object when required by law.

Security Measures

• Encrypted transit (HTTPS/TLS) and encryption-at-rest on supported platforms.
• Role-based access, multi-factor authentication, and logging.
• Regular patching, dependency monitoring, and least-privilege workflows.
• Secure development practices with code reviews and CI pipelines.

Data Subject Rights & Assistance

We assist Controllers in fulfilling requests for access, rectification, restriction, portability, or erasure by implementing required technical changes within agreed timelines. Controllers must route requests to us in writing and confirm the requester’s identity.

International Transfers

When transfers outside the EU/EEA occur, we rely on Standard Contractual Clauses and EU-hosted infrastructure. Controllers may request a copy of the safeguards and must ensure lawful transfer mechanisms for their own data flows.

Controller Responsibilities

• Provide lawful instructions and determine retention periods.
• Confirm that all data shared with Visoniq TechCore is legally obtained and that required notices have been given.
• Maintain records of processing activities and notify us promptly of any regulatory inquiries involving the services we provide.

Agreement Execution

This DPA becomes legally binding when signed by both parties and referenced in a Statement of Work or service order. For a countersigned copy, email contact@visoniq.com.

Visoniq TechCore provides technical GDPR implementation, not legal advice. Please consult qualified counsel before execution.