DRAFT TEMPLATE — review with qualified legal counsel before relying on it.
This template Data Processing Agreement (DPA) describes the terms on which Tevrix, as a processor, processes personal data on behalf of a customer acting as controller. A countersigned DPA may be available on request for eligible plans.
1. Subject matter and roles
The customer is the controller and Tevrix is the processor. Tevrix processes personal data only to provide the Service and only on the customer's documented instructions, including as set out in the Terms of Service and the product configuration.
2. Nature, purpose, and categories
Processing covers the personal data the customer submits to operate booking and CRM features — typically the customer's own clients' identifiers, contact details, appointment history, and notes — for the duration of the subscription.
3. Processor obligations
As processor, Tevrix undertakes to:
- Process personal data only on documented instructions.
- Ensure persons authorised to process the data are bound by confidentiality.
- Apply appropriate technical and organisational security measures.
- Assist the controller with data-subject requests and with security, breach-notification, and impact-assessment obligations, taking into account the nature of processing.
- Make available information needed to demonstrate compliance and allow for audits within reasonable, agreed parameters.
4. Sub-processing
The customer authorises Tevrix to engage sub-processors listed on the Sub-processors page. Tevrix imposes data-protection terms on sub-processors that are no less protective than this DPA and remains responsible for their performance. We give notice of intended changes so the customer can object.
5. International transfers
Data is processed within the EU by default. Any transfer outside the EEA relies on an appropriate safeguard such as an adequacy decision or standard contractual clauses.
6. Return and deletion
On termination, Tevrix deletes or returns personal data as instructed, save where retention is required by law. Export tooling is available within the product where applicable.