Data Processing Agreement (DPA) | Image Solutions India

01. Parties

The Data Controller is the client who submits personal data or project files. The Data Processor is Image Solutions India, reachable at sales@imagesolutionsindia.com.

02. Purpose of Processing

We process personal data solely to deliver requested services — photo/video editing, retouching, graphic design, digital marketing, web and software development, and other agreed services — only per the Controller’s documented instructions.

03. Categories of Personal Data

Depending on the service, this may include names, emails, phone numbers, business contact details, photographs and videos of identifiable individuals, property and product images, file metadata, and project communications.

04. Categories of Data Subjects

Personal data may relate to customers, employees, photographers, real estate professionals, property owners, e-commerce merchants, marketing agencies, business representatives, and website visitors.

05. Duration of Processing

Personal data is processed only as long as necessary to deliver services, meet contractual obligations, comply with the law, or resolve disputes, and is deleted or returned on request after project completion.

06. Processor Obligations

We process data only on documented instructions, bind personnel to confidentiality, implement appropriate security measures, notify breaches without undue delay, and assist with data subject requests.

07. Confidentiality

All employees, contractors, and authorized personnel with access to personal data are bound by strict confidentiality obligations and will not disclose it to unauthorized persons except where required by law.

08. Security Measures

We maintain reasonable safeguards including secure file storage, role-based access controls, password-protected systems, antivirus and firewall protection, secure file transfer, regular updates, and staff awareness training.

09. Sub-processors

We may engage trusted third-party providers for hosting, cloud storage, email delivery, collaboration, and backups, and take reasonable steps to ensure they protect personal data under applicable law.

10. International Transfers

As we operate from India, personal data submitted by clients outside India may be transferred to and processed in India, with appropriate safeguards applied where required.

11. Assistance to the Controller

On reasonable request, we assist with data subject access, rectification, erasure, portability, and restriction requests, plus security information and regulatory compliance relevant to our processing.

12. Personal Data Breach

If we become aware of a confirmed personal data breach, we investigate promptly, take steps to contain and remediate it, notify the Controller without undue delay, and provide information to support their legal obligations.

13. Audit Rights

Where required by law or agreement, the Controller may request reasonable information demonstrating compliance, subject to reasonable notice and without disrupting normal business operations.

14. Data Deletion or Return

On termination of services and written request, we will return or securely delete the Controller’s personal data, unless retention is required by law or legitimate business obligations.

15. Limitation of Liability

Each party’s liability under this DPA is governed by the limitations of liability in the applicable service agreement or Terms & Conditions, unless prohibited by applicable law.

16. Governing Law

This DPA is governed by the laws specified in the applicable service agreement, or otherwise the laws of India. Where GDPR applies, both parties agree to cooperate in good faith.

17. Contact Information

For questions about this DPA or data protection matters, contact us:
Email: sales@imagesolutionsindia.com
Website: www.imagesolutionsindia.com