Data Processing Agreement

This Data Processing Agreement ("DPA") forms part of, and is incorporated into, the Business Terms between MANVEN ("MCORE") and the client. The client accepts it once, on behalf of itself and every business it operates on MCORE; it takes effect on that acceptance and governs MANVEN's processing of the client's customers' personal data for as long as MANVEN processes that data. MANVEN may update this DPA on notice to the client; a material change requires the client's renewed acceptance, while other updates — including adding a sub-processor under section 6 — take effect on notice.

Why this exists. When a client uses MCORE, the client decides why and how their customers' personal data is processed — they are the controller. MCORE holds and processes that data on their instruction — we are the processor. GDPR Art. 28(3) requires this written agreement before that processing is lawful.