Data Processing Agreement (DPA)

1. Roles

Customer — controller. XYZ Sp. z o.o. (SMSPort) — processor on documented Customer instructions.

2. Scope

Phone numbers, SMS content, and delivery metadata necessary to provide the service, for the term of the agreement (Terms).

3. Obligations

Processing per documentation and Customer configuration; confidentiality; appropriate security; assistance with data subject requests and breaches — without undue delay to the Customer.

4. Subprocessors

Subprocessor list. Material list changes will be communicated to Customers.

5. Termination

Deletion or return of entrusted data after the service ends, unless law requires longer retention.

6. Incorporation

Using the service under the Terms incorporates this DPA unless parties agree otherwise in writing.