Data Processing Agreement
Draft processing terms for customer campaign data, subject to completion of the processing schedules.
01 Parties and roles
This draft concerns processing for TheAdcentric by the contracting entity that must be identified before publication. The contracting parties, controller and processor roles depend on the activity and must be identified in the completed agreement and order. This page is not itself a signed or accepted data processing agreement. If no legal entity is configured, the contracting entity must be identified before publication.
02 Scope, data and instructions
The final schedule must describe processing scope and duration, data and data-subject categories, and the customer's documented instructions. These schedules must reflect verified service behavior rather than assumptions.
03 Confidentiality and security
Confidentiality commitments and security measures must be reviewed against controls actually implemented. No certification, encryption coverage or global compliance claim is made in this draft.
04 Subprocessors
Only verified providers acting as subprocessors should be listed. The final schedule must identify the provider, service, data, role and relevant processing locations.
05 Assistance with requests
Assistance with data-subject requests and customer instructions must be defined according to the parties' actual roles and the capabilities of the service.
06 Incidents and audits
Incident cooperation, information and audit procedures require review and must not imply response times or audit rights that have not been approved.
07 Return, deletion and retention
Return and deletion options must reflect verified product, backup and provider capabilities and any approved lawful-retention exceptions. No deletion period is invented here.
08 Transfers
Processing locations and any required transfer terms must be established from verified hosting and provider information before this schedule is completed.