5.1 Subject matter
This DPA forms part of the agreement between the customer and Individual entrepreneur Serhii Viacheslavovych Kiniak for use of Dinea. It governs processing where the customer is controller and Dinea is processor.
5.2 Instructions
Dinea processes personal data only to provide the service, under documented customer instructions, the agreement or applicable law.
5.3 Confidentiality
Anyone with access to the data is bound by confidentiality and receives access on a need-to-know basis.
5.4 Security
Dinea maintains appropriate technical and organisational measures having regard to risk, including access controls, HTTPS, secret protection, backups, logging and incident procedures.
5.5 Subprocessors
The customer gives general authorisation to use the subprocessors listed at https://dinea.pro/en/legal/subprocessors. Material changes are notified in accordance with the agreement.
5.6 Assistance with data-subject rights
Dinea provides reasonable assistance so the customer can handle requests for access, correction, deletion, restriction, objection and portability.
5.7 Incidents
If a confirmed incident affects customer data, Dinea notifies the customer without undue delay and provides available information needed for assessment.
5.8 Deletion or return
After the service ends, Dinea deletes or returns data in accordance with the agreement, selected settings and applicable law.
5.9 Audit
On reasonable request, Dinea provides available information about compliance with this DPA. Any formal audit is agreed with due regard to confidentiality, security and reasonable cost.
5.10 Description of processing
- subject: provision of the CRM;
- duration: the agreement term and a limited period after it ends;
- nature: storage, organisation, synchronisation, transfer on instruction, backup and deletion;
- purposes: leads, customers, inventory, communications, finance, analytics and integrations;
- data subjects: store customers, employees, suppliers and contacts;
- data: contact, transaction, communication, technical and order data;
- special categories: the service is not intended for intentional storage of such data unless separately agreed.