Data Processing Agreement (DPA)
Effective Date:
This Agreement governs the processing of personal data by MB "MHR Solutions" (Processor) on behalf of the Customer (Controller) when using the MHR WMS application.
- Personal data processed: user account details (name, email, role), warehouse staff identifiers, customer/supplier contact details, invoice and stock information.
- Purpose: to provide, maintain, and improve the WMS service.
- Duration: for the term of the subscription, unless otherwise required by law.
The Customer acts as the Controller and determines the purposes and means of processing. MB "MHR Solutions" acts only on documented instructions from the Controller.
- Encryption of data in transit (HTTPS).
- Regular backups and secure storage.
- Access control and authentication.
- System monitoring and logging.
The Controller authorizes MB "MHR Solutions" to use sub-processors such as hosting providers, payment processors, and analytics services. Sub-processors are contractually required to meet GDPR obligations.
The Processor will assist the Controller in fulfilling obligations regarding data subject rights, including access, correction, deletion, and portability requests.
Upon termination, personal data will be deleted or returned within 60 days unless retention is required by law.
This Agreement is governed by the laws of Lithuania and the EU General Data Protection Regulation (GDPR).
Last Updated: January 2025