Effective Date: March 23, 2025
This Data Processing Agreement ("DPA") is made between Purple Zebra ("Processor") and the User ("Controller") in compliance with GDPR for processing transaction-related data.
Data Processing Details
- Purpose: The Processor will process transaction data to enrich and categorize financial transactions.
- Data Processed: Transaction amount, currency, MCC code, reason, and location.
- Storage Location: Digital Ocean’s Frankfurt data center.
- Sub-processors: Google Places and other third-party data providers.
Controller Obligations
- Ensure all shared data complies with applicable laws.
- Obtain necessary user consents before sharing personal data.
Processor Obligations
- Process data only for the stated purpose.
- Implement technical and organizational security measures.
- Notify the Controller within 72 hours of any personal data breach.
Data Retention and Deletion
- Data is retained only as necessary and deleted upon request.
Governing Law
- This DPA is governed by the laws of the United Arab Emirates (UAE).
