Data Processing Agreement

For personal data processed through DID systems on behalf of a client, the client acts as the data controller and DID acts as the data processor under the EU General Data Protection Regulation (GDPR).

DID processes personal data solely to provide the contracted services — operating automation systems, handling communication, and delivering reporting and dashboards — and only on documented instructions from the client.

Depending on the systems deployed, processing may include contact details, communication content, lead and customer records, and business activity data relating to the client's customers, prospects, and staff.

DID may engage vetted sub-processors (such as cloud infrastructure and integration providers) to deliver the services. A current list of sub-processors is available on request, and clients are informed of material changes.

DID implements appropriate technical and organizational measures — including encryption, access control, and isolation — as described in our Security Policy, to protect personal data.

Where personal data is transferred outside the EEA, DID relies on appropriate safeguards such as Standard Contractual Clauses. EU-based data handling options are available.

DID assists clients in responding to data subject requests (access, rectification, erasure, and others) to the extent required by applicable law.

On termination of services, DID will return or permanently delete personal data at the client's choice, subject to any legal retention obligations.

To request and sign the complete Data Processing Agreement, contact us at dataintelligencedashboards@gmail.com.