Data Processing Agreement (DPA)

This Data Processing Agreement (“DPA”) forms part of the SaaS Licence Agreement between Acrontec SaaS Solutions Ltd (“Acrontec”, “Processor”) and the Client (“Controller”). It governs the processing of personal data within the Acrontec Marketplace Engine (“Software”).

1. Roles of the Parties

The Client acts as the Data Controller. Acrontec acts as the Data Processor and processes personal data only on documented instructions from the Client.

2. Types of Personal Data Processed

Acrontec may process the following categories of data on behalf of the Client:

• Customer details (name, address, phone, email)
• Restaurant and merchant details
• Driver details
• Order and delivery information
• Technical data (IP address, device info, logs)

3. Purpose of Processing

Personal data is processed solely for:

• Operating the marketplace
• Managing orders and deliveries
• Providing support and diagnostics
• Improving system performance
• Ensuring security and stability

4. Processor Obligations

Acrontec agrees to:

• Process data only on documented Client instructions
• Maintain confidentiality
• Implement appropriate technical and organisational security measures
• Assist the Client with GDPR compliance where applicable
• Notify the Client of any data breaches without undue delay
• Ensure authorised personnel are trained in data protection

5. Security Measures

Acrontec implements:

• Encrypted data storage
• Secure authentication and access control
• Regular security audits
• Infrastructure monitoring
• Secure backups

6. Sub‑Processors

Acrontec may use sub‑processors such as hosting providers, payment processors, or communication services. Acrontec ensures all sub‑processors meet GDPR‑level security and privacy standards.

7. International Transfers

Data may be stored or processed outside the UK depending on infrastructure. Acrontec ensures appropriate safeguards for international transfers.

8. Data Breach Notification

In the event of a personal data breach, Acrontec will notify the Client without undue delay and provide relevant information to support compliance obligations.

9. Client Responsibilities

The Client must:

• Ensure lawful collection of personal data
• Provide accurate and updated data
• Comply with GDPR and applicable laws
• Maintain secure access credentials

10. Data Subject Rights

Acrontec assists the Client in responding to data subject requests, including:

• Access
• Correction
• Deletion
• Restriction
• Portability

11. Return or Deletion of Data

Upon termination of the SaaS Licence Agreement, Acrontec will:

• Return Client data upon request
• Delete all personal data after final export
• Retain backups only for disaster recovery purposes

12. Audit Rights

The Client may request documentation demonstrating Acrontec’s compliance with this DPA. Formal audits may be conducted with reasonable notice.

13. Duration

This DPA remains in effect for the duration of the SaaS Licence Agreement and terminates automatically when the Agreement ends.

14. Contact Information

For data protection enquiries, contact:

Email: privacy@acrontec.com

Company: Acrontec SaaS Solutions Ltd