Data Processing Addendum

The customer is controller and LENK is processor for customer-submitted visitor data. LENK processes that data only to provide the service, on documented instructions in the agreement, product settings and support requests, unless law requires otherwise. Each party remains responsible for its own independent processing.

The subject matter is hosting and operating LENK pages and tools for the subscription term. Processing may include collection, storage, organization, display, transmission, retrieval, deletion and support access. Data subjects may include visitors, leads, customers, invitees and the customer’s team. Data categories depend on configured fields and may include contact, business, response, device and uploaded-file data.

LENK ensures people authorized to process customer data are bound by confidentiality and uses appropriate technical and organizational measures described in the Security Statement, taking account of risk, state of the art, cost and the nature of processing.

The customer authorizes LENK to use subprocessors for infrastructure, storage, delivery, support, security and payment operations. LENK will impose data-protection obligations appropriate to the service and remains responsible for their processing as required by applicable law. Material changes may be notified through the platform or registered email.

Taking account of the service and available information, LENK will reasonably assist with data-subject requests, security assessments, breach obligations and regulator inquiries. The customer is responsible for determining whether and how to respond. Additional work beyond standard service may require agreed fees.

LENK will notify the customer without undue delay after confirming a personal-data breach affecting customer-controlled data and will provide available information reasonably needed for the customer’s obligations. Notification is not an admission of fault.

Where required, LENK uses lawful transfer safeguards. At the end of service, customer data is deleted or returned according to product capability, retention cycles and legal duties. LENK will provide information reasonably necessary to demonstrate compliance and may satisfy audit requests with current independent reports or a scoped review that protects other customers and security.