Data processing agreement (DPA)
Last updated: 16 October 2026
This agreement supplements the terms of use and privacy notice when [REGISTRATION DETAILS: name] processes personal data on your behalf under GDPR Article 28.
Parties and roles
You are the controller for your customers’ and site data. [REGISTRATION DETAILS: name] is the processor for that data and the controller for account and service usage data as described in the privacy notice.
Subject matter and duration
Processing covers customer, job, and report data you enter to provide the service. Processing lasts for the term of the service agreement.
Nature and purpose
Storage, organisation, editing, reporting, sharing, and deletion as instructed by you to deliver job reports and related features.
Types of personal data
Customer names and contact details, site addresses, work time, materials, photos, trips, and other content you enter in reports.
Categories of data subjects
Your customers, partners, and other individuals whose data you enter in the service.
Processor obligations
We process data only on documented instructions, comply with data protection law, assist you with data subject rights, and notify you of personal data breaches without undue delay.
Subprocessors
We use subprocessors as listed in the privacy notice. We will inform you of material changes in the service.
Transfers
We do not transfer personal data outside the EU/EEA without an appropriate legal basis and safeguards, as described in the privacy notice.
Deletion and return
When the agreement ends we delete or return personal data on your request, unless law requires retention.
Contact
Privacy matters: admin@kvolio.com.