Data Processing Agreement

This Data Processing Agreement ("DPA") is incorporated into the Terms of Service and applies to the extent that Areef GmbH Processes Personal Data on behalf of the Customer. ### 1. Roles of the Parties For the purposes of GDPR and KVKK, the Customer is the Data Controller and Areef is the Data Processor of the Contact Data uploaded to the platform. ### 2. Obligations of the Processor Areef shall: - Process Personal Data only on documented instructions from the Customer. - Ensure that persons authorized to process the Personal Data have committed themselves to confidentiality. - Take all measures required pursuant to Article 32 of the GDPR (Security of processing). ### 3. Sub-processors The Customer provides general authorization for Areef to engage sub-processors (e.g., cloud hosting providers, LLM API providers) to fulfill its obligations. Areef remains fully liable for the acts of its sub-processors. ### 4. Data Subject Rights Areef shall assist the Customer by appropriate technical and organizational measures, insofar as this is possible, for the fulfillment of the Customer's obligation to respond to requests for exercising the data subject's rights. ### 5. Data Deletion Upon termination of the service, Areef will delete or return all Personal Data to the Customer, unless applicable law requires storage of the Personal Data. For inquiries regarding this agreement, please contact dpa@areef.dev.