1. Scope
This DPA applies when a customer uses SikaBooks to process personal data in connection with business operations.
2. Roles
- Customer acts as data controller for business and customer records entered into the platform.
- SikaBooks acts as data processor and processes data on documented customer instructions.
3. Processing Purpose and Duration
Processing is limited to providing the subscribed SaaS services, support, security operations, and legally required obligations for the duration of the service relationship.
4. Security Measures
SikaBooks applies technical and organizational safeguards appropriate to the risk, including access controls, encryption in transit where supported, audit logging, and operational monitoring.
5. Subprocessors
SikaBooks may engage trusted subprocessors (for hosting, email, payment, and infrastructure) only as needed to deliver the service. SikaBooks remains responsible for subprocessor obligations under this DPA.
6. Data Subject Requests
Where legally required, SikaBooks will provide reasonable assistance so customers can respond to access, correction, deletion, or objection requests related to personal data they control.
7. International Transfers
If data transfer across borders is required to provide the service, SikaBooks will apply appropriate contractual and technical safeguards consistent with applicable law.
8. Incident Notification
SikaBooks will notify affected customers without undue delay after confirming a personal data incident with material impact.
9. Return or Deletion
Upon contract end and subject to legal retention requirements, customer data is deleted or returned according to product retention/deletion processes and customer request.
For enterprise or contract-specific data terms, contact support@sikabooks.net.