Data Processing Agreement
The English version of this document is still being finalized. We'd rather not publish a translation of a text still under legal review: on a data processing agreement, an approximate wording does not carry the same weight as an exact one.
To get the DPA in its current version, email us at contact@qrenox.com — we'll send it to you directly.
What the DPA covers
The agreement governs Qrenox's processing of the personal data of the merchant's customers. The roles are split as follows:
| The merchant | Controller — determines the purposes and means, and owns the relationship with their customers |
|---|---|
| Qrenox | Processor — processes data on the merchant's behalf and solely under their instructions |
It also sets out:
- the categories of data and data subjects involved
- the nature and duration of processing
- technical and organizational security measures
- use of sub-processors and advance notice to the merchant
- assistance to the merchant with data-subject rights requests
- data breach notification
- deletion or return of data at the end of the relationship
In the meantime
The principles governing this processing are already described in the privacy policy — in particular section 2 (our role), section 6 (sub-processors), section 8 (retention periods), and section 10 (security).
The Arabic version of this document, still a structured draft, is also available.
Contact
Email: contact@qrenox.com
Address: 30 N Gould St Ste R, Sheridan, WY 82801, USA