Terms governing the processing of personal data on behalf of Quantum Flow clients.
This Data Processing Agreement ("Agreement") forms part of the contractual framework between Quantum Flow Technologies Private Limited and its affiliated entities ("Quantum Flow", "we", "us", or "our") and our customers, partners, or counterparties ("Customer") where Quantum Flow processes personal data on behalf of the Customer.
This Agreement is intended to comply with applicable data protection laws, including but not limited to GDPR, UAE data protection regulations, and other relevant privacy frameworks, where applicable.
This Agreement applies where Quantum Flow acts as a data processor or service provider and processes personal data on behalf of the Customer in connection with the provision of services.
Personal data shall be processed only for the purposes defined in the underlying service agreement and in accordance with documented instructions from the Customer, unless otherwise required by applicable law.
Personal Data means any information relating to an identified or identifiable natural person.
Processing means any operation performed on personal data, including collection, storage, use, disclosure, or deletion.
Data Subject means the individual to whom the personal data relates.
Applicable Data Protection Laws means all laws and regulations governing the processing of personal data that apply to the parties.
The Customer acts as the data controller and determines the purposes and means of processing.
Quantum Flow acts as the data processor and processes personal data solely on documented instructions from the Customer.
Quantum Flow does not determine the independent use of personal data unless explicitly agreed in writing.
Depending on the services provided, Quantum Flow may process personal data relating to:
Processing activities may include hosting, transmission, monitoring, analytics, support services, and operational management.
Quantum Flow ensures that all personnel authorized to process personal data are subject to confidentiality obligations, whether contractual or statutory, and receive appropriate data protection training.
Quantum Flow implements appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.
These measures may include, where appropriate:
Security measures are reviewed and updated as necessary to reflect evolving risks and standards.
Quantum Flow may engage trusted sub-processors to perform specific processing activities, such as infrastructure providers, analytics platforms, or communication tools.
Quantum Flow ensures that any sub-processor is subject to data protection obligations that provide a level of protection equivalent to this Agreement.
A list of sub-processors may be provided upon reasonable request.
Where personal data is transferred outside the country of origin, Quantum Flow ensures that appropriate safeguards are in place, including contractual protections or other lawful transfer mechanisms, in accordance with applicable data protection laws.
Quantum Flow will assist the Customer, where reasonably possible, in responding to requests from data subjects to exercise their rights, including access, correction, deletion, or restriction of processing, as required by law.
Quantum Flow maintains procedures to detect, respond to, and investigate personal data breaches.
In the event of a personal data breach affecting Customer data, Quantum Flow will notify the Customer without undue delay and provide relevant information to support compliance with legal obligations.
Quantum Flow will retain personal data only for as long as necessary to provide the services or as required by applicable law.
Upon termination of services, Quantum Flow will delete or return personal data in accordance with the Customer's instructions, unless retention is required by law.
Quantum Flow will make available reasonable information necessary to demonstrate compliance with this Agreement and applicable data protection laws, subject to confidentiality and security considerations.
Audit rights, if any, shall be exercised in a manner that does not unreasonably disrupt Quantum Flow's operations.
Each party's liability under this Agreement shall be subject to the limitations and exclusions set out in the underlying service agreement, unless otherwise required by applicable law.
This Agreement shall be governed by and construed in accordance with the governing law specified in the underlying contract between the parties.
If you have any questions related to this Data Processing Agreement or data protection practices, please contact us via our Contact Us section.