Legal / 03
Data Processing Addendum
Last updated 10 September 2026
This addendum forms part of the customer agreement when THAVIQ processes personal data on the customer's behalf. A countersignature-ready PDF is available below. The customer completes its legal identity, contact and signature without changing the processing terms.
Core terms
- The customer is controller and THAVIQ is processor for submitted scan data.
- Processing is limited to providing, securing and supporting the contracted service.
- Personnel are bound by confidentiality and access is limited by role.
- Sub-processors are governed by equivalent data-protection duties.
- THAVIQ assists with data-subject requests, incidents, assessments and audits.
- At termination, data is returned or deleted subject to documented legal retention.
These subjects follow the processor-contract requirements in GDPR Article 28.