Data Processing Addendum

1. Scope and responsibilities

This Data Processing Addendum (“DPA”) forms part of the service agreement when accepted by both parties. It governs personal information Languvia processes on the Customer’s behalf (“Customer Data”) and takes priority over conflicting general terms on that processing.

The Customer acts as controller, or as an authorised processor for its clients. Languvia acts as processor or subprocessor accordingly. Information Languvia independently processes for its own account administration and billing is addressed separately in our Privacy Policy.

2. Processing details

Purpose and activities: Receiving, storing, translating, checking, synchronising and delivering selected website content, including related support and deletion. Individuals concerned: Authors, employees, contributors, website users and people identified in Customer-submitted content.

Information involved: Names, contact details, biographies, article content, metadata and relevant support information, only as submitted or authorised by the Customer. Sensitive information requires appropriate safeguards agreed before processing. These categories reflect Languvia’s website translation and support functions.

Duration: The service period and the agreed return or deletion period afterwards, subject to lawful retention requirements.

3. Customer instructions

The Customer is responsible for lawful collection, required notices, permissions and processing instructions.

Languvia will process Customer Data only on documented instructions, including authorised service settings, unless applicable law requires otherwise. We will notify the Customer before legally required processing unless prohibited, and promptly flag instructions we consider unlawful.

Customer Data must not be used for unrelated advertising or general-purpose AI-model training under this DPA.

4. Confidentiality and security

Languvia will limit access to authorised personnel subject to confidentiality obligations and maintain risk-appropriate technical and organisational safeguards.

These must address access control, confidentiality, integrity, availability, recovery and regular security assessment, including encryption where appropriate. Specific measures will be recorded in the agreed security schedule.

5. Subprocessors and international transfers

The Customer authorises the subprocessors identified in the agreed provider register. Languvia will provide advance written notice of additions or replacements and an opportunity to object before affected processing begins. Unresolved objections must be addressed before using the disputed provider for that Customer Data.

Subprocessors must receive equivalent contractual data-protection obligations. Languvia remains responsible for their performance of those obligations.

International transfers require an applicable lawful transfer mechanism and any necessary additional safeguards. This DPA does not itself replace required international-transfer clauses or assessments.

6. Assistance and breach notification

Taking account of the processing and available information, Languvia will assist the Customer with individuals’ privacy requests, security obligations, breach notifications, data-protection impact assessments and required regulatory consultations.

Languvia will notify the Customer without undue delay after becoming aware of a personal-data breach affecting Customer Data, provide available information and updates, and cooperate with containment and remediation.

7. Return and deletion

At the Customer’s choice, Languvia will return or delete Customer Data when processing ends and delete remaining copies, unless applicable law requires retention.

The agreed schedule must specify active-system deletion and backup-overwrite deadlines. Pending removal, backup copies remain protected and unavailable for ordinary use. This DPA continues to protect retained Customer Data until deletion.

Copies independently held on the Customer’s website remain the Customer’s responsibility.

8. Compliance and contact

Languvia will provide information necessary to demonstrate compliance and allow and contribute to relevant audits or inspections by the Customer or its appointed auditor. Reasonable confidentiality and security arrangements must not prevent required oversight.

Data-processing enquiries: privacy@languvia.com.