Data Processing Agreement

1. Purpose

This Data Processing Agreement ("DPA") governs the processing of personal data by TKD Consulting on behalf of its clients in connection with the delivery of consulting services, in accordance with applicable data protection laws including GDPR and CCPA where applicable.

2. Definitions

• Data Controller: The client who determines the purposes and means of processing personal data.
• Data Processor: TKD Consulting, acting on the instructions of the Data Controller.
• Personal Data: Any information relating to an identified or identifiable natural person.

3. Processing Instructions

TKD Consulting will only process personal data in accordance with the documented instructions of the Data Controller, unless required to do so by applicable law.

4. Security Measures

TKD Consulting implements appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, destruction, or alteration. These measures are reviewed and updated regularly.

5. Sub-processors

TKD Consulting will not engage sub-processors without prior written authorization from the Data Controller. Any approved sub-processors are bound by equivalent data protection obligations.

6. Data Subject Rights

TKD Consulting will assist the Data Controller in responding to data subject requests including access, rectification, erasure, and portability of personal data within the timeframes required by law.

7. Data Breach Notification

In the event of a personal data breach, TKD Consulting will notify the Data Controller without undue delay and no later than 72 hours after becoming aware of the breach, providing sufficient information to meet regulatory requirements.

8. Termination and Return of Data

Upon termination of services, TKD Consulting will, at the Data Controller's choice, delete or return all personal data and certify that deletion has taken place.

9. Contact

For DPA-related inquiries, contact us at contact@tkdconsult.com.