effective date: june 8, 2025
this data processing addendum forms part of any agreement between ach media agency (“processor”) and you (“controller”) under which processor processes personal data on your behalf.

processing details

• subject-matter: delivery of digital marketing and development services
• duration: term of the underlying agreement plus any statutory retention period
• categories of data: identifiers, contact details, usage data, marketing preferences
• data subjects: your clients, prospects, website visitors

processor obligations

• process personal data only on documented instructions from controller
• implement technical and organizational measures (encryption, access controls, audit logging) to protect data
• ensure any subprocessors are bound by equivalent data protection obligations
• assist controller with data subject requests and regulatory inquiries
• return or delete all personal data upon termination of services

cross-border transfers

• transfers outside the eu are governed by standard contractual clauses or adequacy decisions
• controller may object to a transfer if it lacks adequate safeguards

audit rights

• controller may audit or appoint a qualified auditor once per year, with reasonable notice and scope