Data Processing Addendum (DPA)

1. Scope

This DPA applies when a customer uses SikaBooks to process personal data in connection with business operations.

2. Roles

• Customer acts as data controller for business and customer records entered into the platform.
• SikaBooks acts as data processor and processes data on documented customer instructions.

3. Processing Purpose and Duration

Processing is limited to providing the subscribed SaaS services, support, security operations, and legally required obligations for the duration of the service relationship.

4. Security Measures

SikaBooks applies technical and organizational safeguards appropriate to the risk, including access controls, encryption in transit where supported, audit logging, and operational monitoring.

5. Subprocessors

SikaBooks may engage trusted subprocessors (for hosting, email, payment, and infrastructure) only as needed to deliver the service. SikaBooks remains responsible for subprocessor obligations under this DPA.

6. Data Subject Requests

Where legally required, SikaBooks will provide reasonable assistance so customers can respond to access, correction, deletion, or objection requests related to personal data they control.

7. International Transfers

If data transfer across borders is required to provide the service, SikaBooks will apply appropriate contractual and technical safeguards consistent with applicable law.

8. Incident Notification

SikaBooks will notify affected customers without undue delay after confirming a personal data incident with material impact.

9. Return or Deletion

Upon contract end and subject to legal retention requirements, customer data is deleted or returned according to product retention/deletion processes and customer request.