Data processing agreement (model)

1. Purpose and duration

The processor processes the data only to provide the contracted Transita service, for as long as the relationship lasts and until the data is returned or deleted under clause 9.

2. Controller's instructions

The processor processes the data following the controller's documented instructions, which are the use of Transita under its terms and the settings the company chooses. If an instruction appears unlawful, the processor will say so.

3. Confidentiality

People authorized by the processor to access the data are bound by confidentiality and access it only when needed to provide the service or support.

4. Security

The processor applies the technical and organizational measures described on the “Security and compliance” page, and maintains or improves them while the agreement is in force.

5. Subprocessors

The controller authorizes the subprocessors listed on the “Security and compliance” page. The processor gives at least 30 days' notice before adding or changing one, and the controller may object on reasonable grounds; if no agreement is reached, it may terminate the service without penalty.

The processor requires each subprocessor to meet data protection obligations equivalent to those in this agreement.

6. International transfers

Data is hosted in the United States. Where the law applicable to the controller requires it, transfers rely on the standard contractual clauses approved by the relevant authority (for example, the European Commission's), which are deemed incorporated into this agreement.

7. Data subject rights

The processor helps the controller respond to requests for access, rectification, erasure, objection and portability. Transita allows data to be exported and deleted; if a request reaches the processor directly, it forwards it to the controller without delay.

8. Incidents

The processor notifies the controller of any security breach affecting its data without undue delay and within 48 hours of becoming aware of it at the latest, with the information available and the measures taken, and cooperates as needed.

9. End of service

When the service ends, the controller can export its data. Afterwards, or when the administrators delete the company, the processor deletes the data from the service database. The infrastructure provider's backups are rotated on their own cycle and are not used for any other purpose.

10. Information and audits

The processor makes available to the controller the information needed to demonstrate compliance with this agreement and answers reasonable security questionnaires. On-site audits are agreed with prior notice, during business hours and at the controller's expense.

11. Help with assessments

The processor provides the information within its reach when the controller must carry out an impact assessment or consult a data protection authority.

Annex: description of the processing

Data subjects

The client company's workers loaded into Transita and users of the platform.

Data

Employee ID, area, role, country, tenure and, if the company loads them, name and email. Transition plans, consultation with the person, signatures, progress and, where applicable, leaving date and reason. For users: name, email, role and access logs.

Special categories

Transita does not ask for special category data. The controller agrees not to load it.

Purpose

Planning and following the workforce transition to AI and automation, and recording each step.

Operations

Hosting, consultation, recording, modification, email notices, report generation, export and deletion.

Duration

For the duration of the service, plus the period to export and delete the data.