Data Processing Agreement

When you use SmartlyQ to process personal data of your own customers or contacts, SmartlyQ acts as a data processor on your behalf and you act as the data controller. Our Data Processing Agreement (DPA) sets out how we process that data in compliance with the GDPR and other applicable laws.

Our DPA covers:

• Roles & scope — controller/processor responsibilities and the subject matter, duration, nature, and purpose of processing.
• Security — the technical and organizational measures we apply (encryption in transit and at rest, access control, logging, monitoring).
• Sub-processors — our use of vetted sub-processors and your right to be informed of and object to changes.
• International transfers — safeguards such as the European Commission’s Standard Contractual Clauses.
• Data-subject rights — assistance with access, rectification, erasure, portability, and objection requests.
• Personal-data breaches — notification without undue delay.
• Return & deletion — deletion or return of personal data at the end of the service.

To review and execute a DPA for your account, contact privacy@smartlyq.com. This page is a summary; the signed DPA is the binding agreement.