Data Processing Agreement (DPA)
Last updated : 2026-10-13
Purpose
This agreement governs the processing of personal data by DATA INTUITIVE SRL as processor, on behalf of the customer as controller, within the Ubidesk service. It is an integral part of the subscription terms.
Instructions
The processor processes data only on documented instructions from the customer, including for transfers. The customer retains control of the purposes.
Security measures
The technical and organizational measures are those described in the Trust Center: end-to-end encryption (TLS 1.3, AES-256-GCM), mandatory MFA, tamper-evident audit log, granular access control.
Subprocessors
The list of subprocessors is published on the dedicated page and updates are notified to the customer, who has a reasonable right to object.
Data breaches
The processor notifies the customer of any personal data breach within 48 hours of detection and cooperates with regulatory notifications.
Duration and return
At the end of the subscription, data is returned or deleted according to the customer’s choice, within 90 days.
Legal — 2026-10-13