Adenda de Procesamiento de Datos

This Adenda de Procesamiento de Datos ("DPA") forms part of the Términos del Servicio between PQG LLC, doing business as EasyBoostMedia ("Processor", "we"), and the customer ("Controller", "you"). It applies where we process personal data on your behalf and is incorporated into the Terms by reference. By accepting the Terms, you accept this DPA.

1. Roles y alcance

For personal data you or your users submit to your instance ("Customer Personal Data"), you act as the controller and we act as the processor. We process Customer Personal Data only to provide and support the Service and on your documented instructions, including as set out in the Terms, our Política de Privacidad, and this DPA.

2. Naturaleza del procesamiento

• Materia: hosting and operation of your Odoo Cloud instance.
• Duración: for the term of your subscription plus the retention window described in the Terms.
• Propósito: to provide, secure, back up, and support the Service.
• Titulares de datos: determined by you (e.g., your customers, suppliers, staff).
• Tipos de datos: determined by you (e.g., names, contact details, transactions, documents).

3. Tus instrucciones

We will process Customer Personal Data only as needed to provide the Service and per your reasonable, lawful instructions. You are responsible for the accuracy and legality of the data you submit and for having the rights and consents needed to use the Service.

4. Confidencialidad

Personnel authorized to process Customer Personal Data are bound by appropriate confidentiality obligations.

5. Medidas de seguridad

We implement technical and organizational measures appropriate to the risk, including tenant isolation, encryption in transit and at rest, access controls, and backups. See our Security page for details.

6. Subprocesadores

You authorize us to engage subprocessors to provide the Service (such as DigitalOcean for hosting, Stripe for payments, and Google for authentication, plus any AI or messaging providers for features you enable). We remain responsible for their performance and impose data-protection obligations on them. A current list is available in our Política de Privacidad or on request. We will give reasonable notice of new subprocessors; if you object on reasonable data-protection grounds, you may terminate the affected Service.

7. Solicitudes de titulares de datos

Taking into account the nature of the processing, we will provide reasonable assistance to help you respond to requests from individuals exercising their rights. Where you can act directly within your instance, you will do so.

8. Brecha de datos personales

We will notify you without undue delay after becoming aware of a personal data breach affecting Customer Personal Data, and will provide information reasonably available to help you meet your notification obligations.

9. Devolución o eliminación

On termination, we will, at your choice and where you can export directly, allow you to export Customer Personal Data within the retention window, after which we delete it; backups age out under our standard rotation, subject to legal retention requirements.

10. Auditorías

On reasonable written request and subject to confidentiality, we will provide information reasonably necessary to demonstrate compliance with this DPA.

11. Transferencias internacionales

We host in the United States for U.S. customers and provide support from Nicaragua. Where required, we rely on appropriate transfer safeguards. See our Política de Privacidad.

12. Prevalencia y vigencia

This DPA applies for as long as we process Customer Personal Data. In case of conflict regarding the processing of personal data, this DPA controls over the Terms. All other terms remain in effect.

13. Contacto

Questions about this DPA? Contact us at info@easyboostmedia.com.

PQG LLC, operando como EasyBoostMedia. By accepting our Terms of Service, you agree to this DPA.