1. Purpose and Scope

This Data Processing Agreement (DPA) governs the processing of personal data by Andeavour on behalf of our customers in connection with our services. This agreement supplements our Terms of Service and Privacy Policies.

2. Definitions

Terms used in this DPA have the meanings set forth in applicable data protection laws, including the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA).

3. Data Processing

Andeavour processes personal data only for the purposes of providing our services and as instructed by the customer. We do not process personal data for our own purposes beyond service provision.

4. Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption, access controls, and regular security assessments.

5. Data Subject Rights

We assist customers in responding to data subject requests and provide necessary information and access to fulfill their obligations under applicable data protection laws.

6. International Transfers

Any international transfers of personal data are conducted in compliance with applicable laws and include appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.