This Data Processing Agreement ("DPA") describes how Qavsa Studio ("Qavsa Studio", "we", "us", or "our") processes personal data on behalf of our clients ("Client", "you", or "your") in connection with our digital services, including website development, booking systems, e-commerce platforms, POS solutions, custom business applications, and ERP or business management systems.

This DPA applies where Qavsa Studio processes personal data on behalf of the Client and acts as a data processor or service provider under applicable data protection laws.

1. Roles and Responsibilities

Depending on the nature of the services provided, the Client may act as the Data Controller or equivalent entity responsible for determining the purposes and means of processing personal data.

Where Qavsa Studio processes personal data on behalf of the Client in connection with the provision of agreed services, Qavsa Studio acts as the Data Processor or equivalent service provider under applicable data protection laws.

Qavsa Studio will process personal data only as necessary to provide the agreed services and in accordance with the Client's documented instructions, unless otherwise required by applicable law.

2. Scope and Purpose of Data Processing

Depending on the project and services purchased, Qavsa Studio may process personal data for purposes including:

Hosting and operating websites and web applications.
Providing online booking and reservation functionality.
Processing customer orders and e-commerce transactions through integrated services.
Managing customer accounts, memberships, and customer relationship data.
Operating POS and business management systems.
Supporting inventory, purchasing, employee, and supplier management functionality.
Providing CRM, ERP, analytics, and business reporting features.
Providing technical support, maintenance, troubleshooting, and system administration.

The specific categories of personal data processed will depend on the Client's business operations, selected services, and system configuration.

3. Categories of Personal Data

Depending on the services provided, personal data processed through Qavsa Studio's systems may include:

Names and contact information.
Email addresses and telephone numbers.
Customer account and membership information.
Booking, reservation, and transaction information.
Business and organizational information.
Employee and supplier information where relevant to the project.
Technical information such as IP addresses and device information where collected by the applicable system.

Clients are responsible for ensuring that they have an appropriate legal basis and all necessary permissions to collect and process personal data submitted to systems developed or operated by Qavsa Studio.

4. Processing Instructions

Qavsa Studio will process personal data only for the purposes necessary to provide the agreed services, maintain the applicable systems, provide technical support, ensure security, and comply with applicable legal obligations.

Qavsa Studio will not intentionally use Client personal data for unrelated purposes or sell Client personal data to third parties.

5. Confidentiality

Qavsa Studio will ensure that personnel and authorized contractors who have access to personal data are subject to appropriate confidentiality obligations.

Access to Client data will be limited to individuals who require access to perform their assigned responsibilities or provide the agreed services.

6. Subprocessors and Third-Party Services

Qavsa Studio may use trusted third-party service providers to support the delivery, hosting, security, communication, analytics, and operation of digital services.

Depending on the project, these providers may include:

Cloud and Hosting Providers: For hosting, infrastructure, storage, databases, and application delivery.
Payment Providers: For processing payments and transactions where payment functionality is integrated into the Client's system.
Communication Providers: For email, messaging, notifications, and customer communications.
Analytics and Monitoring Providers: For performance monitoring, security, error tracking, and service improvement.
Other Technology Providers: Where reasonably necessary to provide specific functionality requested by the Client.

Where required by applicable law, Qavsa Studio will take reasonable steps to ensure that relevant third-party service providers are subject to appropriate data protection and confidentiality obligations.

7. Security Measures

Qavsa Studio implements reasonable technical and organizational measures designed to protect personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure.

Depending on the nature and requirements of the project, security measures may include:

Access controls and authentication mechanisms.
Encryption of data in transit using industry-standard security protocols.
Appropriate protection for stored data where supported by the relevant infrastructure.
Monitoring and logging of relevant system activity.
Regular software updates and security maintenance where applicable.
Restricted access to production systems and Client data.

No method of electronic transmission or storage can be guaranteed to be completely secure. Qavsa Studio therefore cannot guarantee absolute security but will take reasonable measures appropriate to the nature of the services provided.

8. Data Breach and Security Incidents

If Qavsa Studio becomes aware of a confirmed security incident involving personal data processed on behalf of the Client, Qavsa Studio will take reasonable steps to investigate, contain, and mitigate the incident.

Where required by applicable law, Qavsa Studio will notify the Client without undue delay after becoming aware of a confirmed personal data breach affecting the Client's data.

Where reasonably available, such notification may include relevant information about the nature of the incident, the affected data, and measures taken to address the incident.

9. Data Subject Requests

Where applicable, Qavsa Studio will provide reasonable assistance to the Client in responding to requests from individuals exercising their rights under applicable data protection laws.

Requests relating to personal data controlled by the Client should generally be directed to the Client as the Data Controller. Qavsa Studio may assist the Client where such assistance is reasonably necessary and technically available.

10. Data Retention and Deletion

Qavsa Studio will retain personal data only for as long as reasonably necessary to provide the agreed services, comply with applicable legal obligations, resolve disputes, or enforce contractual rights.

Upon termination of the applicable services, Qavsa Studio will, where technically and legally appropriate, return or delete personal data processed on behalf of the Client in accordance with the applicable project agreement and legal requirements.

Certain data may remain in secure backups for a limited period before being automatically overwritten or deleted in accordance with applicable retention procedures.

11. International Data Transfers

Depending on the infrastructure and third-party services used for a particular project, personal data may be processed or stored in countries outside the Client's country of residence.

Where applicable data protection laws require safeguards for international data transfers, Qavsa Studio will take reasonable steps to use appropriate transfer mechanisms or safeguards available through the relevant service providers.

12. Client Responsibilities

The Client is responsible for:

Ensuring that personal data is collected and processed lawfully.
Providing appropriate privacy notices to individuals where required.
Obtaining necessary consents or permissions where applicable.
Providing lawful and documented instructions to Qavsa Studio regarding data processing.
Maintaining the security of Client-controlled accounts and credentials.

13. Contact Information

If you have questions regarding this Data Processing Agreement or the processing of personal data by Qavsa Studio, please contact:

Company: Qavsa Studio
Email: qavsastudio.team@gmail.com

14. Agreement and Updates

This DPA may be incorporated into or supplemented by a separate agreement, statement of work, or service contract between Qavsa Studio and the Client.

Qavsa Studio may update this DPA from time to time to reflect changes in its services, technology, security practices, or applicable legal requirements. The latest version will be made available through the applicable Qavsa Studio website or service documentation.

This DPA applies where Qavsa Studio processes personal data on behalf of the Client and acts as a data processor or service provider under applicable data protection laws.

1. Roles and Responsibilities

Depending on the nature of the services provided, the Client may act as the Data Controller or equivalent entity responsible for determining the purposes and means of processing personal data.

Qavsa Studio will process personal data only as necessary to provide the agreed services and in accordance with the Client's documented instructions, unless otherwise required by applicable law.

2. Scope and Purpose of Data Processing

Depending on the project and services purchased, Qavsa Studio may process personal data for purposes including:

Hosting and operating websites and web applications.
Providing online booking and reservation functionality.
Processing customer orders and e-commerce transactions through integrated services.
Managing customer accounts, memberships, and customer relationship data.
Operating POS and business management systems.
Supporting inventory, purchasing, employee, and supplier management functionality.
Providing CRM, ERP, analytics, and business reporting features.
Providing technical support, maintenance, troubleshooting, and system administration.

The specific categories of personal data processed will depend on the Client's business operations, selected services, and system configuration.

3. Categories of Personal Data

Depending on the services provided, personal data processed through Qavsa Studio's systems may include:

Names and contact information.
Email addresses and telephone numbers.
Customer account and membership information.
Booking, reservation, and transaction information.
Business and organizational information.
Employee and supplier information where relevant to the project.
Technical information such as IP addresses and device information where collected by the applicable system.

4. Processing Instructions

Qavsa Studio will not intentionally use Client personal data for unrelated purposes or sell Client personal data to third parties.

5. Confidentiality

Qavsa Studio will ensure that personnel and authorized contractors who have access to personal data are subject to appropriate confidentiality obligations.

Access to Client data will be limited to individuals who require access to perform their assigned responsibilities or provide the agreed services.

6. Subprocessors and Third-Party Services

Qavsa Studio may use trusted third-party service providers to support the delivery, hosting, security, communication, analytics, and operation of digital services.

Depending on the project, these providers may include:

Cloud and Hosting Providers: For hosting, infrastructure, storage, databases, and application delivery.
Payment Providers: For processing payments and transactions where payment functionality is integrated into the Client's system.
Communication Providers: For email, messaging, notifications, and customer communications.
Analytics and Monitoring Providers: For performance monitoring, security, error tracking, and service improvement.
Other Technology Providers: Where reasonably necessary to provide specific functionality requested by the Client.

7. Security Measures

Qavsa Studio implements reasonable technical and organizational measures designed to protect personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure.

Depending on the nature and requirements of the project, security measures may include:

Access controls and authentication mechanisms.
Encryption of data in transit using industry-standard security protocols.
Appropriate protection for stored data where supported by the relevant infrastructure.
Monitoring and logging of relevant system activity.
Regular software updates and security maintenance where applicable.
Restricted access to production systems and Client data.

8. Data Breach and Security Incidents

Where required by applicable law, Qavsa Studio will notify the Client without undue delay after becoming aware of a confirmed personal data breach affecting the Client's data.

Where reasonably available, such notification may include relevant information about the nature of the incident, the affected data, and measures taken to address the incident.

9. Data Subject Requests

Where applicable, Qavsa Studio will provide reasonable assistance to the Client in responding to requests from individuals exercising their rights under applicable data protection laws.

10. Data Retention and Deletion

Certain data may remain in secure backups for a limited period before being automatically overwritten or deleted in accordance with applicable retention procedures.

11. International Data Transfers

Depending on the infrastructure and third-party services used for a particular project, personal data may be processed or stored in countries outside the Client's country of residence.

12. Client Responsibilities

The Client is responsible for:

Ensuring that personal data is collected and processed lawfully.
Providing appropriate privacy notices to individuals where required.
Obtaining necessary consents or permissions where applicable.
Providing lawful and documented instructions to Qavsa Studio regarding data processing.
Maintaining the security of Client-controlled accounts and credentials.

13. Contact Information

If you have questions regarding this Data Processing Agreement or the processing of personal data by Qavsa Studio, please contact:

Company: Qavsa Studio
Email: qavsastudio.team@gmail.com

14. Agreement and Updates

This DPA may be incorporated into or supplemented by a separate agreement, statement of work, or service contract between Qavsa Studio and the Client.

This DPA applies where Qavsa Studio processes personal data on behalf of the Client and acts as a data processor or service provider under applicable data protection laws.

1. Roles and Responsibilities

Depending on the nature of the services provided, the Client may act as the Data Controller or equivalent entity responsible for determining the purposes and means of processing personal data.

Qavsa Studio will process personal data only as necessary to provide the agreed services and in accordance with the Client's documented instructions, unless otherwise required by applicable law.

2. Scope and Purpose of Data Processing

Depending on the project and services purchased, Qavsa Studio may process personal data for purposes including:

Hosting and operating websites and web applications.
Providing online booking and reservation functionality.
Processing customer orders and e-commerce transactions through integrated services.
Managing customer accounts, memberships, and customer relationship data.
Operating POS and business management systems.
Supporting inventory, purchasing, employee, and supplier management functionality.
Providing CRM, ERP, analytics, and business reporting features.
Providing technical support, maintenance, troubleshooting, and system administration.

The specific categories of personal data processed will depend on the Client's business operations, selected services, and system configuration.

3. Categories of Personal Data

Depending on the services provided, personal data processed through Qavsa Studio's systems may include:

Names and contact information.
Email addresses and telephone numbers.
Customer account and membership information.
Booking, reservation, and transaction information.
Business and organizational information.
Employee and supplier information where relevant to the project.
Technical information such as IP addresses and device information where collected by the applicable system.

4. Processing Instructions

Qavsa Studio will not intentionally use Client personal data for unrelated purposes or sell Client personal data to third parties.

5. Confidentiality

Qavsa Studio will ensure that personnel and authorized contractors who have access to personal data are subject to appropriate confidentiality obligations.

Access to Client data will be limited to individuals who require access to perform their assigned responsibilities or provide the agreed services.

6. Subprocessors and Third-Party Services

Qavsa Studio may use trusted third-party service providers to support the delivery, hosting, security, communication, analytics, and operation of digital services.

Depending on the project, these providers may include:

Cloud and Hosting Providers: For hosting, infrastructure, storage, databases, and application delivery.
Payment Providers: For processing payments and transactions where payment functionality is integrated into the Client's system.
Communication Providers: For email, messaging, notifications, and customer communications.
Analytics and Monitoring Providers: For performance monitoring, security, error tracking, and service improvement.
Other Technology Providers: Where reasonably necessary to provide specific functionality requested by the Client.

7. Security Measures

Qavsa Studio implements reasonable technical and organizational measures designed to protect personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure.

Depending on the nature and requirements of the project, security measures may include:

Access controls and authentication mechanisms.
Encryption of data in transit using industry-standard security protocols.
Appropriate protection for stored data where supported by the relevant infrastructure.
Monitoring and logging of relevant system activity.
Regular software updates and security maintenance where applicable.
Restricted access to production systems and Client data.

8. Data Breach and Security Incidents

Where required by applicable law, Qavsa Studio will notify the Client without undue delay after becoming aware of a confirmed personal data breach affecting the Client's data.

Where reasonably available, such notification may include relevant information about the nature of the incident, the affected data, and measures taken to address the incident.

9. Data Subject Requests

Where applicable, Qavsa Studio will provide reasonable assistance to the Client in responding to requests from individuals exercising their rights under applicable data protection laws.

10. Data Retention and Deletion

Certain data may remain in secure backups for a limited period before being automatically overwritten or deleted in accordance with applicable retention procedures.

11. International Data Transfers

Depending on the infrastructure and third-party services used for a particular project, personal data may be processed or stored in countries outside the Client's country of residence.

12. Client Responsibilities

The Client is responsible for:

Ensuring that personal data is collected and processed lawfully.
Providing appropriate privacy notices to individuals where required.
Obtaining necessary consents or permissions where applicable.
Providing lawful and documented instructions to Qavsa Studio regarding data processing.
Maintaining the security of Client-controlled accounts and credentials.

13. Contact Information

If you have questions regarding this Data Processing Agreement or the processing of personal data by Qavsa Studio, please contact:

Company: Qavsa Studio
Email: qavsastudio.team@gmail.com

14. Agreement and Updates

This DPA may be incorporated into or supplemented by a separate agreement, statement of work, or service contract between Qavsa Studio and the Client.