Scope and operating boundary
A final agreement should identify the parties and their roles for each activity, document the processing instructions and schedule, and cover security, sub-processors, assistance, and end-of-service return or deletion.
Data Processing Addendum
Data Processing Addendum, written around the service you actually use.
Define verified controller/processor roles, instructions, safeguards, subprocessors, assistance and deletion obligations.
Current limitation
The App processing schedule, sub-processor and transfer inventory, and operational evidence for retention, assistance, audit, or deletion are not yet verified. This Site draft does not establish that Rellooma is the processor.
Decision this page supports
Use this draft to prepare the activity schedule and annexes for review. Do not sign or rely on it until the parties, data, purposes, locations, safeguards, and actual deletion process are verified.
Working legal draft · English canonical
Draft clauses for owner and counsel review
This English text is a non-operative review draft. It is not an effective policy, executed agreement or legal advice. Facts and clauses marked as open must be verified before publication.
DRAFT — NOT EFFECTIVE. No customer agreement or legal commitment is created by this page.
Privacy roles & instructions
Service scope & account
Safeguards & incident duties
Provider inventory & changes
Recipients, providers & transfers
Rights & secure requests
Retention & deletion
Scope and instructions
For each processing activity, the parties must document subject matter, duration, nature, purpose, personal-data categories, data-subject categories and controller instructions. This Site draft is not an App processing schedule.
Processor obligations
Proposed: process only documented instructions; bind authorised personnel to confidentiality; maintain agreed safeguards; control further processors; assist with rights and compliance duties; provide proportionate audit information; and return or delete data at termination subject to lawful retention.
Required annexes
Before execution, complete the parties and processing schedule, verified technical and organisational measures, authorised subprocessor inventory, and transfer map with applicable safeguards. The exact App data map, retention, locations, audit process and assistance commitments remain open.
Execution gate
This text is not an executed DPA or evidence that operations meet a contractual measure. Counsel and the authorised signatory must approve the completed annexes and execution process.