Data Processing Agreement (DPA)
Last updated: March 15, 2024
1. Introduction
This Data Processing Agreement ("Agreement") is part of the Terms and Conditions of KnowHub ("the Application") and governs the processing of personal data by KnowHub on behalf of its users. This Agreement is intended to comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Definitions
- Controller: The user who determines the purposes and means of processing personal data.
- Processor: KnowHub, which processes personal data on behalf of the Controller.
- Personal Data: Any information relating to an identified or identifiable individual.
- Processing: Any operation performed on personal data, including collection, storage, modification, and deletion.
- Sub-Processor: Any third party engaged by KnowHub to assist in processing personal data.
3. Responsibilities of the Controller
- Personal data is collected and processed lawfully.
- Data subjects have given consent where required.
- The use of KnowHub complies with applicable data protection laws.
4. Responsibilities of the Processor
- Process personal data only as instructed by the Controller.
- Implement appropriate technical and organizational measures to protect personal data.
- Ensure confidentiality of the data.
- Assist the Controller in responding to data subject requests.
- Notify the Controller of any data breaches without undue delay.
5. Use of Sub-Processors
- KnowHub may engage Sub-Processors for data processing activities.
- The Processor will ensure that Sub-Processors comply with obligations under this Agreement.
- A list of Sub-Processors will be made available upon request.
6. Data Transfers
- Personal data may be transferred outside the European Economic Area (EEA) only if adequate safeguards are in place, such as Standard Contractual Clauses or an adequacy decision.
7. Data Retention & Deletion
- Personal data will be retained only as long as necessary for the agreed processing purposes.
- Upon termination of services or request from the Controller, KnowHub will delete or return all personal data unless required by law to retain it.
8. Data Subject Rights Assistance
- Access, rectification, or erasure of personal data.
- Objections to processing and data portability.
- Any other rights under applicable data protection laws.
9. Security Measures
- Encryption of personal data.
- Access controls and authentication mechanisms.
- Regular security audits and monitoring.
10. Liability & Indemnification
- Each party shall be liable for breaches of this Agreement under applicable data protection laws.
- The Controller agrees to indemnify KnowHub against claims resulting from unlawful data processing under their instructions.
11. Termination & Duration
- This Agreement remains in effect as long as KnowHub processes personal data on behalf of the Controller.
- Upon termination, KnowHub will cease processing personal data and ensure its secure deletion.
12. Governing Law & Jurisdiction
- This Agreement is governed by the laws of the European Community.
- Disputes shall be resolved in the competent courts of the European Community.
Contact Information
- For questions regarding this Agreement, contact us at support@knowhub.app