Data Processing Agreement (DPA)

This DPA forms part of the Terms & Conditions between Quimbel ("Processor") and the User ("Controller").

1. Subject Matter

Processor provides invoicing and payment tracking services involving processing of personal data.

2. Duration

This DPA remains in effect as long as personal data is processed.

3. Nature of Processing

• Storage of invoice data
• Processing client names and contact details
• Maintaining payment status records

4. Security Measures

Processor implements encryption, secure hosting, and restricted access controls.

5. Subprocessors

Processor may use hosting and analytics providers under confidentiality agreements.

6. Data Subject Rights

Processor assists Controller in responding to data access and deletion requests.

7. Data Breach Notification

Processor will notify Controller without undue delay after becoming aware of a breach.

8. Data Deletion

Upon termination, personal data will be deleted unless legally required to retain it.