Data Processing Agreement

1. Roles of the Parties

In connection with the provision of the Service to the Customer, the Customer is the Data Controller of any Personal Data processed via the Service, and AuditFREE acts as the Data Processor on behalf of the Customer.

2. Processing of Personal Data

AuditFREE shall only process Personal Data on behalf of and in accordance with Customer's documented instructions. AuditFREE will not process Personal Data for its own purposes.

3. Sub-processors

The Customer provides general authorization for AuditFREE to engage onward sub-processors. AuditFREE will provide the Customer with a list of current sub-processors upon request and will inform the Customer of any intended changes concerning the addition or replacement of sub-processors.

4. Security

AuditFREE shall implement and maintain appropriate technical and organizational security measures to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access.

5. Data Subject Rights

AuditFREE shall, to the extent legally permitted, promptly notify the Customer if it receives a request from a Data Subject to exercise their rights under applicable Data Protection Laws. AuditFREE will not respond to such requests directly without Customer's prior authorization.