Data Processing Agreement

This Data Processing Agreement (DPA) governs the processing of personal data by MAICE as a data processor on behalf of the corporate client (data controller), in accordance with GDPR Article 28. MAICE shall process data only on documented instructions from the controller, maintain a current list of sub-processors, and implement appropriate technical and organizational security measures.

Data transfers outside the EEA are governed by Standard Contractual Clauses (SCCs). In the event of a data breach, MAICE will notify the controller without undue delay, and no later than 72 hours. The controller retains the right to conduct audits of MAICE's data processing activities.