Data processing addendum

This addendum applies when Ossvy processes personal data on behalf of a business customer as part of the Ossvy platform.

Roles

The customer is the controller and Ossvy is the processor. Ossvy processes personal data only on the customer's documented instructions.

Security

Ossvy keeps appropriate technical and organisational measures, including access control, encryption in transit and regular backups, and limits access to staff who need it.

Sub-processors and transfers

Ossvy uses a small number of sub-processors for hosting and email and tells customers before adding new ones. Transfers outside the customer's country follow the safeguards required by GDPR and KVKK.

Requests

To sign the addendum or ask about it, contact us through our contact page.