Tietojenkäsittelysopimus
Last updated: January 1, 2026
1. Johdanto
This Data Processing Addendum ("DPA") forms part of the agreement between you ("Customer") and Getia AS ("Processor") for the use of ConsumerXLab services.
2. Määritelmät
- Personal Data: Any information relating to an identified or identifiable natural person
- Processing: Any operation performed on personal data
- Controller: The entity that determines the purposes and means of processing
- Processor: The entity that processes personal data on behalf of the controller
3. Käsittelyn laajuus
The Processor shall:
- Process personal data only on documented instructions from the Customer
- Ensure that persons processing data are subject to confidentiality obligations
- Implement appropriate technical and organizational security measures
- Auta asiakasta vastaamaan rekisteröidyn oikeuspyyntöihin
- Poista or return all personal data upon termination of services
4. Alikäsittelijät
The Customer authorizes the Processor to engage subprocessors as listed in the Subprocessors List.
5. Turvatoimenpiteet
- Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
- Käyttöoikeuksien hallinta ja tunnistautuminen
- Regular security assessments
- Incident response procedures
6. Tietomurtoilmoitus
In the event of a personal data breach, the Processor shall notify the Customer within 72 hours.
7. Yhteystiedot
For questions about data processing, please contact us at [email protected]
Yritys: Getia AS (Org. nr: 926 610 198)
Osoite: At Mesh, Møllergata 6, 0179 Oslo, Norja