Skip to content

Data Processing Addendum (DPA)

Effective date: January 20, 2026

This Data Processing Addendum ("DPA") applies when Modern Tech Solutions processes personal data on behalf of a customer in connection with services provided under an Order, statement of work, or similar agreement. If you need a signed DPA, contact us.

1. Roles of the parties

  • Customer acts as the controller (or business) for personal data it provides or makes available.
  • Modern Tech Solutions acts as the processor (or service provider) for such personal data.

2. Processing details

  • Subject matter: providing and supporting the services described in the applicable Order.
  • Duration: the term of the services plus any retention required by law.
  • Nature and purpose: hosting, support, maintenance, and other services as agreed.
  • Types of data: may include names, email addresses, phone numbers, account identifiers, and usage data depending on the customer’s implementation.
  • Categories of data subjects: customer end users, employees, contractors, or other individuals whose data is processed via the services.

3. Customer instructions

Modern Tech Solutions will process personal data only on documented instructions from the customer, including with regard to transfers, unless required by law.

4. Confidentiality

We ensure personnel authorized to process personal data are bound by confidentiality obligations.

5. Security measures

We implement reasonable technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

6. Subprocessors

We may use subprocessors (e.g., hosting, email, analytics, payment providers) to support the services. We remain responsible for subprocessors to the extent required by law and our agreements.

7. Assistance

We will provide reasonable assistance to help the customer respond to data subject requests, security incidents, and regulatory inquiries, considering the nature of the processing and information available.

8. Deletion or return

Upon termination of the services, we will delete or return personal data as reasonably requested by the customer, unless retention is required by law.

9. Contact

For DPA requests, email ocbarc@gmail.com.