Data Processing Agreement (DPA)

Parties

• Controller:[Customer Name] ("Controller")
• Processor:ZIBA GLOBAL CONSULTING LTD – hereafter referred to as "Pivix", "we", "us" or "Processor"
• Email: support@pivix.io

This Data Processing Agreement ("Agreement") is entered into between the Controller and the Processor in accordance with Article 28 of the EU General Data Protection Regulation (GDPR) and forms part of the Terms of Service between the parties for the use of the service available at https://www.pivix.io.

1. Subject Matter

This Agreement governs the Processor's processing of personal data on behalf of the Controller in connection with the provision of the Pivix service.

2. Duration

This Agreement remains in effect as long as the Processor processes personal data on behalf of the Controller.

3. Nature and Purpose of Processing

• Purpose: To provide scorecard and lead generation services, including hosting, storing, and managing quiz data and lead submissions.
• Nature: Collection, recording, storage, structuring, and retrieval.
• Type of Data: Names, email addresses, contact details, user responses, and other personal data as submitted by the Controller or its data subjects.
• Data Subjects: Individuals whose data is entered or collected by the Controller via the Pivix platform.

4. Obligations of the Processor

The Processor agrees to:

• Process data only on documented instructions from the Controller.
• Ensure confidentiality of all personnel handling data.
• Implement appropriate technical and organizational measures to protect data.
• Assist the Controller in fulfilling data subject requests.
• Notify the Controller without undue delay of any data breach.
• Delete or return all personal data after termination of services, at the Controller's choice.
• Provide information and access for audits by the Controller or supervisory authority.

5. Subprocessors

The Controller authorizes the Processor to engage subprocessors. The Processor shall:

• Ensure subprocessors provide adequate data protection guarantees.
• Notify the Controller of any intended changes regarding subprocessors.

A current list of subprocessors is available upon request.

6. International Transfers

Where personal data is transferred outside the EEA, the Processor shall ensure that such transfers comply with applicable data protection laws and use mechanisms such as Standard Contractual Clauses (SCCs).

7. Controller's Obligations

The Controller agrees to:

• Comply with applicable data protection laws.
• Ensure legal basis for data collection and processing.
• Provide instructions to the Processor that comply with legal obligations.

8. Liability

Liability is governed by the underlying Terms of Service. Each party shall be liable for its own breaches of this Agreement.

9. Miscellaneous

• This Agreement is governed by the laws of England and Wales.
• If any provision is held invalid, the rest of the Agreement remains unaffected.

10. Contact Information

Processor:
ZIBA GLOBAL CONSULTING LTD (operating as Pivix)
Website: https://www.pivix.io
Address: 4 RAVEN ROAD, UNIT 1C3-227, LONDON, UNITED KINGDOM, E18 1HB
Email: support@pivix.io

Controller:
[Customer Name]
[Customer Address]
[Customer Email]

This DPA is deemed accepted and binding upon both parties as of the date the Controller accepts the Terms of Service and begins using the Pivix platform. No physical signature is required. By signing up for an account at https://www.pivix.io, the Controller enters into this DPA with the Processor.