Data Processing Agreement

1. Definitions

• "Personal Data" means any information relating to an identified or identifiable natural person processed through the Service.
• "Processing" means any operation performed on Personal Data, including rendering templates containing Personal Data.
• "Data Subject" means the individual to whom Personal Data relates.

2. Scope and Purpose

Subject Matter: Processing of Personal Data through the Template Tiger template rendering service.

Duration: For the term of the Customer's use of the Service.

Nature and Purpose: Template Tiger processes Personal Data solely to render templates as requested by the Customer via API calls. This includes receiving variable data, merging it with templates, and returning rendered output.

3. Types of Personal Data

The types of Personal Data processed are determined by the Customer and may include:

• Names and contact information
• Email addresses
• Any other data the Customer includes in template variables

4. Categories of Data Subjects

Data Subjects are determined by the Customer and typically include the Customer's end users, customers, or contacts whose data is used in template rendering.

5. Processor Obligations

Template Tiger shall:

• Process Personal Data only on documented instructions from the Customer
• Ensure personnel are bound by confidentiality obligations
• Implement appropriate technical and organizational security measures
• Not engage sub-processors without prior authorization
• Assist the Customer in responding to Data Subject requests
• Delete or return Personal Data upon termination, at Customer's choice
• Make available information necessary to demonstrate compliance

6. Security Measures

Template Tiger implements the following security measures:

• Encryption of data in transit (TLS/HTTPS)
• Secure authentication and access controls
• Regular security assessments
• Incident response procedures

7. Sub-processors

Template Tiger uses the following sub-processors:

• Koyeb: Cloud infrastructure hosting (Frankfurt, Germany)

The Customer authorizes the use of these sub-processors. Template Tiger will notify the Customer of any intended changes to sub-processors.

8. Data Transfers

Personal Data is processed within the European Economic Area (EEA). If transfers outside the EEA are required, Template Tiger will ensure appropriate safeguards are in place, such as Standard Contractual Clauses.

9. Data Subject Rights

Template Tiger will assist the Customer in fulfilling Data Subject requests (access, rectification, erasure, etc.) to the extent technically feasible and as required by applicable law.

10. Data Breach Notification

Template Tiger will notify the Customer without undue delay upon becoming aware of a Personal Data breach affecting Customer data, and will provide information necessary for the Customer to meet its breach notification obligations.

11. Audit Rights

Upon reasonable notice and subject to confidentiality obligations, Template Tiger will make available information necessary to demonstrate compliance with this DPA. The Customer may conduct audits or inspections, or appoint an independent auditor to do so.

12. Termination

Upon termination of the Service, Template Tiger will, at the Customer's choice, delete or return all Personal Data and delete existing copies, unless retention is required by law.

13. Contact

For DPA-related inquiries, contact us at [email protected].