Data Processing Agreement (DPA)

1. Introduction

This DPA applies to the processing of personal data through the Product Fetcher API under GDPR and other applicable data protection laws.

2. Roles and Responsibilities

Processor: Product Fetcher processes data on behalf of the Client.

Controller: The Client determines the purposes and means of processing data.

3. Client Responsibilities

Lawful Basis for Processing: Clients must ensure they have a lawful basis to process data through the API.

Compliance: Clients must comply with GDPR and any other relevant data protection laws.

Restricted Use: The API must not be used to process sensitive or restricted data.

4. Subprocessors

Product Fetcher uses trusted third-party providers for hosting and infrastructure. Details are available upon request.

5. Data Breach Notification

In case of a data breach, Product Fetcher will notify the Client within 72 hours.

6. Data Retention

Product Fetcher stores data temporarily for service delivery purposes and deletes it after processing.

7. Governing Law

This DPA is governed by French law.