Data Processing Terms

For the purposes of these Data Processing Terms, the following terms have the meanings set out below:

“Controller” means the natural or legal person, public authority, agency or other body which determines the purposes and means of the processing of Personal Information.

“Personal Information” means any information relating to an identified or identifiable natural person (“Data Subject”) who can be identified, directly or indirectly, in particular by reference to an identifier such as a firm name, Proprietor name,mobile number or to one or more factors specific to that natural person. The term “Personal Information” also covers information relating to deceased natural persons and/or juristic persons where this is required under applicable Data Privacy Law.

“Personal Information Breach” means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, Personal Information transmitted, stored or otherwise Processed under these Data Processing Terms.

“Processing” means any operation or set of operations which is performed on Personal Information or on sets of Personal Information, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. “Processed” and “Process” shall be construed in accordance with the definition of “Processing”.

“Processor” means a natural or legal person, public authority, agency or other body which processes Personal Information on behalf of the Controller.

Other capitalized terms used but not defined herein have the meanings set forth in the Business Terms or are otherwise defined contextually within these Data Processing Terms.

These Data Processing Terms apply to the extent that the Business Terms state that Agro Deall Processes Personal Information in your Customer Data as your Processor. In the case of an express conflict between these Data Processing Terms and the Business Terms, these Data Processing Terms will govern solely to the extent of the conflict.

To the extent required by applicable Data Privacy Law, Agro Deall and you agree to the following:

• a. Agro Deall shall only Process Personal Information in accordance with your instructions as set out in the Business Terms and these Data Processing Terms.
• b. Agro Deall confirms that:
  • i. the duration, subject matter, nature and purpose of the Processing shall be as specified in the Business Terms;
  • ii. the types of Personal Information Processed comprise customer contact information as described in the Business Terms;
  • iii. the categories of Data Subjects comprise customers with whom you communicate using the Agro Deall service; and
  • iv. your obligations and rights as Controller in relation to this Personal Information are as set out in these Data Processing Terms.
• c. Agro Deall shall ensure that any person authorised to Process Personal Information under these Data Processing Terms is bound by appropriate obligations of confidentiality.
• d. Agro Deall will implement appropriate technical and organizational measures to protect the Personal Information processed under these Data Processing Terms including against unauthorized or unlawful Processing or accidental loss, alteration, disclosure, or destruction. These include the measures listed in the Data Security Terms (as updated from time to time, for example, to reflect technological developments) which are expressly incorporated into these Data Processing Terms;
• e. Agro Deall will notify you without undue delay of the discovery by Agro Deall of any Personal Information Breach;
• f. Taking into account the nature of the Processing and the information available to Agro Deall, Agro Deall will assist you in your role as a Controller, by appropriate technical and organisational measures, insofar as this is possible, in fulfilling any obligations under Data Privacy Law applicable to you as a Controller to respond to requests from Data Subjects regarding the exercise of their Data Subject rights;
• g. To the extent required by Data Privacy Law applicable to you as the Controller, the Processor agrees to support your obligations as a Controller, in particular regarding the security of the Processing or regarding Personal Information Breaches, by providing you with reasonable assistance, taking into account the nature of the Processing and the information available to Agro Deall;
• h. Upon your request, Agro Deall will make available to you all information and provide all assistance that is reasonably necessary to demonstrate Agro Deall’s compliance with its legal obligations as a Processor under these Data Processing Terms;
• i. Upon termination of the Business Terms, Agro Deall shall cease Processing Personal Information and shall delete it within the time period set forth in the Business Terms unless applicable law requires further storage or to the extent that Agro Deall has a right or obligation to use the Personal Information independent of the Business Terms.

Effective Date: August 23, 2023