Zusammenfassung
This page provides a summary of our Data Processing Addendum ("DPA") for the hosted version of RevQR. It is not a signed contract. For a signed DPA, contact legal@revqr.com.
Rollen
For customer data processed inside RevQR, you are the data controller and Anton Andrushchenko is the data processor. For account administration and billing data, we may act as a controller. This DPA applies to processing where we act as your processor.
Verarbeitung
Subject matter and duration
Processing is limited to providing the service during the term of the agreement and a reasonable period after termination for deletion, return, or legal compliance.
Nature and purpose
- Provide, secure, and maintain the service.
- Operate features you configure (users, tasks, queues, workflows, attachments).
- Customer support and troubleshooting.
- Usage analytics only with consent where required (see Privacy Policy).
Categories of data subjects
- Customer personnel and authorized users.
- End users whose data is entered into the service by the customer.
Categories of personal data
- Account identifiers (name, email, role, team/workspace details).
- Operational content you enter (orders, tasks, comments, attachments).
- Usage data and device/browser information (only if analytics is enabled by consent).
- Support communications.
The service is not intended to process special categories of data. If you need to process such data, contact us to agree on additional safeguards.
Unterauftragsverarbeiter
We use subprocessors to provide hosting, email delivery, analytics, and payment processing. See the Subprocessors list for the current providers and locations.
Sicherheit
We implement reasonable technical and organizational measures to protect data, including access controls, least-privilege access, and encryption in transit. We review and update these measures as our services evolve.
Customer instructions and assistance
We process personal data only on your documented instructions unless required by law. We provide reasonable assistance to help you respond to data subject requests and regulatory inquiries related to the service.
International transfers
Where personal data is transferred outside the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses or other lawful transfer mechanisms.
Security incidents
We will notify you without undue delay after becoming aware of a personal data breach involving customer data.
Deletion or return
Upon termination, we will delete or return customer data within a reasonable time, subject to legal obligations and backup retention. Analytics and contact data retention are described in our Privacy Policy.
Audit and documentation
Upon request, we will provide reasonable documentation about our security measures. On-site audits, if necessary, are subject to prior written agreement.
Kontakt
DPA requests: legal@revqr.com