DPA

1. What this is

A DPA is a set of contractual terms that governs how Orgmind processes customer-connected data on behalf of a customer, including security commitments, subprocessors, and assistance with data subject requests.

2. Roles

• For customer-connected data processed through Orgmind, the customer is generally the controller and Orgmind is the processor/service provider.
• For Orgmind website and business contact data, Orgmind is generally the controller.

3. Security and auditability

Orgmind is designed to protect customer data with technical and organizational measures, including encryption in transit and at rest, access controls, and audit trails for key processing and actions.

4. Subprocessors

Orgmind uses subprocessors/service providers to run the service (for example, hosting and security). A list of subprocessors can be provided as part of the DPA package or on request.

5. Data subject requests and assistance

Where applicable, Orgmind will provide reasonable assistance to customers to respond to data subject requests and regulatory inquiries related to customer-connected data, consistent with the DPA and applicable law.

6. Deletion/return

Upon termination and consistent with the DPA and the customer contract, Orgmind will support deletion/return of customer-connected data, subject to reasonable operational needs (for example, backups and security logging) and legal obligations.

Request the DPA

Email privacy@orgmind.co and we will share our standard DPA for review and signature.