Data Processing Agreement — FEDCEN

• Controller: The user or organization providing data
• Processor: FEDCEN, processing data on behalf of the Controller

FEDCEN processes personal data for:

• Account creation
• Platform access
• Compliance and traceability functions
• Security and operational monitoring

Processing continues for as long as the user maintains an account or uses the Service.

FEDCEN will:

• Process data only on documented instructions
• Implement appropriate security measures
• Ensure confidentiality of personnel
• Assist with GDPR rights requests
• Notify the Controller of data breaches
• Delete or return data upon request

FEDCEN may use GDPR‑compliant sub‑processors (e.g., hosting providers). A list will be provided upon request.

Data is stored in the EU or transferred under GDPR‑approved safeguards (e.g., SCCs).

FEDCEN implements:

• Encryption in transit
• Password hashing
• Access control
• Logging and monitoring
• Secure infrastructure

FEDCEN assists the Controller in responding to:

• Access requests
• Deletion requests
• Correction requests
• Data export requests

Upon termination or request, FEDCEN will:

• Delete personal data
• Or return it to the Controller

Backups may persist for a limited retention period.

Upon reasonable notice, the Controller may request information necessary to verify compliance.