Data Processing Addendum

This Addendum forms part of the agreement between TolTem Web Solutions Limited (“Processor”) and its clients (“Controller”) regarding the processing of personal data.

To ensure compliance with UK GDPR in relation to the processing of personal data for the provision of IT services.

Processor may process client data only to the extent necessary for delivering agreed services.

• Process data only under written instructions
   
• Implement appropriate technical and organizational measures
   
• Ensure confidentiality and staff training
   
• Notify the Controller of data breaches without undue delay
   

Processor may engage third parties (e.g., hosting providers) and will ensure they also meet GDPR obligations.

Processor will assist Controller in responding to data access or deletion requests.

Upon project completion or termination, Processor will delete or return all personal data unless otherwise required by law.

Controller has the right to audit Processor’s compliance with this Addendum with reasonable notice.