Data Processing Addendum

Where AdEagle processes personal data on behalf of a business customer (Customer Content, tracking events, leads, connected-platform data), the customer is the controller and AdEagle the processor. Our DPA (available on request from legal@adeagle.io or support@adeagle.io and incorporated by reference for customers who require it) provides: processing only on documented instructions; confidentiality of personnel; technical and organizational measures described on the Security page; assistance with data-subject requests and impact assessments; breach notification without undue delay (target 72 hours); deletion or return of data at the end of the Service; audit rights via our reports and questionnaires; use of subprocessors only with a flow-down of equivalent obligations and 30 days' notice of changes; Standard Contractual Clauses for international transfers.