Data Processing Addendum
GDPR processor terms for customer-controlled personal data.
1. Parties and scope
This Data Processing Addendum (“DPA”) is between Multilingual Talents UAB as processor (“RentAgents”) and the customer identified in the account or order form as controller (“Customer”). It applies to personal data processed by RentAgents on Customer’s documented instructions.
2. Processing details
| Subject matter | Provision of AI-agent orchestration, tools, storage, integrations, messaging and authorised Desktop Node functions. |
|---|---|
| Duration | For the term of the service and the deletion/return period. |
| Nature | Collection, hosting, organisation, transmission, retrieval, consultation, generation, transformation, logging, deletion and other operations instructed by Customer. |
| Purpose | To provide, secure, support and maintain the configured RentAgents services. |
| Data subjects | Customer personnel, clients, prospects, candidates, contacts, channel participants, website users and other persons whose data Customer submits. |
| Data types | Identity, contact, employment, communication, document, device, usage, support and other data submitted by Customer. Special-category or criminal-offence data is prohibited unless expressly agreed and lawfully safeguarded. |
3. Customer instructions
RentAgents will process personal data only on documented instructions, including configuration of agents, tools, providers, integrations, retention and deletion. RentAgents will notify Customer if an instruction appears to infringe applicable data-protection law, unless prohibited from doing so.
4. Confidentiality
Persons authorised to process personal data are subject to confidentiality obligations and receive access only as needed.
5. Security
RentAgents will maintain measures appropriate to risk, including access controls, tenant separation, encryption in transit, protected secret storage, logging, backups, vulnerability management and incident procedures. Customer is responsible for secure configuration, provider selection, access roles and endpoint security.
6. Subprocessors
Customer gives general authorisation for subprocessors listed in the Subprocessor and Connected Service List. RentAgents will provide reasonable notice of material new subprocessors and allow Customer to object on legitimate data-protection grounds.
7. Customer-directed providers
Customer authorises RentAgents to transmit data to AI providers, messaging platforms, custom endpoints and integrations selected by Customer. Customer is responsible for assessing whether each selected provider is suitable and lawful for the intended data.
8. Data-subject requests
Taking into account the nature of processing, RentAgents will provide reasonable assistance for access, correction, deletion, restriction, portability, objection and automated-decision requests. Customer remains responsible for responding to data subjects.
9. Security incidents
RentAgents will notify Customer without undue delay after becoming aware of a personal-data breach affecting Customer data and will provide available information reasonably required for Customer’s obligations. Notification is not an admission of fault.
10. DPIAs and consultations
RentAgents will provide reasonable information needed for data-protection impact assessments and prior consultations, considering the nature of processing and information available. Additional bespoke assistance may be charged at agreed rates.
11. Deletion and return
At termination or on documented request, RentAgents will delete or return Customer personal data, unless law requires retention. Deletion from backups occurs through the normal backup-expiry cycle.
12. Audits
RentAgents will make available information reasonably necessary to demonstrate compliance. Audits must be proportionate, protect other customers and security, occur no more than annually unless required by an authority or incident, and use independent auditors bound by confidentiality. Customer bears audit costs unless material non-compliance is found.
13. International transfers
Where RentAgents makes a restricted transfer, the parties will use an applicable adequacy decision, approved contractual clauses or another lawful mechanism. Customer-directed transfers through selected providers remain subject to Customer’s assessment and instructions.
14. Priority
If this DPA conflicts with the general Terms on data-processing matters, this DPA controls. Mandatory data-protection law prevails.