Data Processing Agreement

Status

This Data Processing Agreement (DPA) sets out the processing relationship between your organization and KORZ Studio B.V.. Substantive annexes — including the sub-processor list, data categories, transfer mechanisms (SCCs / adequacy decisions), security measures (Annex II), and audit rights — may be expanded as counsel ratifies additional schedules. See /trust/legal-entities for operator registry context and /trust/sub-processors for live sub-processor disclosure.

Roles

Data Controller: your organization (the customer). You determine the purposes and means of processing personal data processed through the Service.

Data Processor: KORZ Studio B.V. (KvK 95507833, Paradijsweg 48a, 2461 TN Ter Aar, the Netherlands). We process personal data only on your documented instructions, including as set out in these terms, your use of the Service, and any applicable order or subscription agreement.

Substantive clauses (placeholder)

The following clauses will be populated or expanded by counsel and rendered in this section: subject matter and duration; nature and purpose of processing; categories of data and data subjects; controller and processor obligations; security of processing (Article 32 GDPR); sub-processors and prior authorization; international transfers; audits and inspections; assistance with data subject rights and breach notification; deletion or return of data; liability; governing law and jurisdiction.

Execution

DPA execution flow (signature ceremony, version stamp, counterparty disclosure) will land via the substrate-canonical signed-bundle primitive once substantive content is ratified by KORZ Studio B.V. counsel.