Data Processing Addendum (DPA)
1. Purpose
This Addendum outlines how Sunblaze Media processes personal data on behalf of the Controller in accordance with applicable data protection laws, including the GDPR and CCPA.
2. Scope of Processing
Sunblaze Media may process the following data:
- Contact information (e.g., names, emails)
- Website usage data (e.g., analytics, cookies)
- Marketing preferences
Processing is limited to the scope necessary to deliver branding, marketing, and design services.
3. Security Measures
Sunblaze Media agrees to implement appropriate technical and organizational measures to protect personal data, including:
- Secure storage and encryption
- Access controls
- Data minimization
4. Subprocessors
Sunblaze Media may use trusted third-party tools (e.g., email platforms, analytics providers). A list of sub-processors is available upon request.
5. Data Subject Rights
Sunblaze Media will assist the Controller in responding to data subject requests, including access, correction, or deletion.
6. Data Breach Notification
In the event of a data breach, Sunblaze Media will notify the Controller without undue delay and provide relevant details.
7. Termination
Upon termination of services, Sunblaze Media will delete or return all personal data, unless retention is required by law.