Data processing agreement

This agreement is between the customer, as controller, and RZ OÜ, registry code 14255749, not registered for VAT, as processor. It covers the personal data the customer stores in the service. The same words are available as a PDF from the legal pages.

Subject matter: hosting the customer's orders, contacts, files, and messages. Duration: the subscription, plus the retention stated in the privacy policy. Nature and purpose: the service described in the terms of service.

Types of data and categories of people: carrier staff, warehouse contacts, and the customer's own clients, to the extent the customer types those details in.

The processor processes the data only on the customer's instructions, keeps it confidential, and uses the security measures of the service: access control by account, encryption in transit, backups, and no public upload directory. The processor assists with requests from the people the data is about, and deletes or returns the data when the service ends.

Sub-processors are the public list. The processor gives notice before a new sub-processor is added. The customer may object and cancel.

The customer may ask once a year for a written description of the security measures. There is no on-site audit of the hosting hall unless a regulator requires it.

International transfers are the same as in the privacy policy. The privacy contact is info@nocargo.eu.