Data Processing Addendum

Email support@lynqu.com from the address associated with your Lynqu organization, with your organization name, the legal entity that will sign, and your timeline. We will come back to you on the processing terms for your account. If your organization has its own DPA paper it needs us to sign, send it in the same email — that is usually the fastest route, and we will review it and come back with any comments.

If you use Lynqu to capture, store, or enrich personal data about other people — leads, event attendees, scanned contacts — and you are established in the EEA or the UK, or you offer goods or services to people who are, you are the data controller and Lynqu is your processor. In that arrangement the GDPR requires a written processing agreement between us. Individual users on personal plans, using Lynqu only for their own contacts, generally do not need one.

Whichever paper we end up signing, the GDPR requires a controller-to-processor agreement to address:

• •Roles and scope. You act as controller; Gravisun Soft Kft. acts as processor, and processes personal data only on your documented instructions.
• •Subject matter and duration. The categories of data subjects and personal data involved, the purpose of processing, and how long processing lasts.
• •Security measures. The technical and organisational measures applied to your data — the concrete controls are described publicly at lynqu.com/security.
• •Subprocessors. The approval mechanism for subprocessors, and notice when they change.
• •Data subject rights. How Lynqu assists you in responding to access, correction, deletion, and portability requests from the people whose data you hold. You can already export and delete that data yourself from your account settings.
• •Deletion and return. What happens to personal data at the end of the agreement.
• •International transfers. The transfer mechanism relied on where personal data moves outside the EEA or UK.

Our security practices are documented at lynqu.com/security. How Lynqu handles personal data generally is set out in the Privacy Policy at lynqu.com/privacystatement. An individual can opt out of contact enrichment, and be added to a suppression list, at lynqu.com/privacy/enrichment-opt-out.