Data Processing Addendum

This Data Processing Addendum (“DPA”) forms part of the Terms & Conditions between you (the “Controller”) and Accountieons (the “Processor”) and applies to the extent Accountieons processes personal data on your behalf.

1. Roles

You are the data controller for the personal data you enter into the Service. Accountieons acts as a data processor and processes that data only on your documented instructions, as necessary to provide the Service.

2. Scope of processing

• Subject matter: provision of the Accountieons accounting and business-management Service.
• Duration: for the term of your subscription and any legally required retention period.
• Nature & purpose: hosting, storing, and processing your business records to operate the Service.
• Categories of data: contact details of your customers, vendors, and staff, and related financial and transactional records you choose to store.

3. Our obligations

• process personal data only on your instructions and as required by law;
• ensure persons authorised to process the data are bound by confidentiality;
• implement appropriate technical and organisational security measures (see our Security page);
• assist you, where reasonable, in responding to requests from individuals exercising their rights; and
• notify you without undue delay after becoming aware of a personal-data breach affecting your data.

4. Sub-processors

You authorise us to engage trusted sub-processors (such as cloud hosting, payment gateways, and messaging providers) to help deliver the Service. We impose data-protection obligations on our sub-processors that are consistent with this DPA and remain responsible for their performance.

5. International transfers

Where personal data is transferred outside your country, we take steps to ensure an appropriate level of protection consistent with applicable law.

6. Return & deletion

Upon termination of the Service, and subject to legal retention requirements, we will delete or return your personal data as described in our Privacy Policy.

7. Contact