Overview
This Data Processing Agreement ("DPA") forms part of the Terms of Service between you (the "Customer") and Cornerz Hub Ltd., and addresses the processing of personal data by Mijra on behalf of the Customer.
1Definitions
Personal Data
Any information relating to an identified or identifiable natural person processed by Mijra on behalf of the Customer.
Processing
Any operation performed on personal data, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure or deletion.
Data Subject
An identified or identifiable natural person to whom personal data relates.
2Scope of processing
Mijra will process personal data only:
- As necessary to provide the services under the Terms of Service;
- As instructed by the Customer through use of the services;
- As required by applicable law.
3Security measures
Mijra implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
- Encryption of personal data in transit and at rest;
- Regular security testing and monitoring;
- Access controls and authentication mechanisms;
- Incident response and breach notification procedures;
- Regular backups and disaster recovery plans;
- Employee training and confidentiality agreements.
4Sub-processors
The Customer authorizes Mijra to engage sub-processors to process personal data. Mijra maintains a list of current sub-processors, which include:
| Sub-processor | Purpose |
|---|---|
| Amazon Web Services | Cloud infrastructure |
| Google Cloud Platform | Analytics and storage |
| Stripe | Payment processing |
| SendGrid | Email services |
Mijra will notify the Customer of any intended changes concerning the addition or replacement of sub-processors.
5Data subject rights
Mijra will assist the Customer in fulfilling its obligations to respond to requests from data subjects exercising their rights, including:
- Right to rectification;
- Right to restriction of processing;
- Right to data portability.
6Data breach notification
Mijra will notify the Customer without undue delay — and in any event within 72 hours — upon becoming aware of a personal data breach affecting Customer data.
7Return & deletion
Upon termination of services, Mijra will delete or return all personal data to the Customer, unless applicable law requires continued storage of such data.
8Contact us
For any questions regarding data processing, please contact [email protected] (Cornerz Hub Ltd., 3 Makram Ebid St, Nasr City, Cairo, Egypt).