DATA PROCESSING AGREEMENT (DPA)
Last updated: 2026/04/08
This DPA forms part of the Terms of Service.
1. PARTIES
Controller: Customer
Processor: UAB Greituolis
2. SUBJECT MATTER
Processing of data through Pickitoo Connect platform.
3. NATURE OF PROCESSING
Data routing
Integration handling
Event processing
4. TYPES OF DATA
Customer data
Order data
Product data
Integration metadata
5. PROCESSOR OBLIGATIONS
UAB Greituolis shall:
Process data only on instructions
Ensure confidentiality
Implement security measures
Notify breaches within 72 hours
6. SUBPROCESSORS
We may use subprocessors such as:
A list of subprocessors will be maintained and updated.
7. DATA TRANSFERS
Data is processed within the EEA.
If transferred outside, appropriate safeguards (e.g. SCC) are applied.
8. SECURITY
We implement:
Encryption
Access controls
Monitoring
9. DATA BREACH
We will notify Customer without undue delay.
10. DATA DELETION
Upon termination:
Data is deleted after retention period (max 30 days)
11. AUDITS
Customer may request reasonable audit information.
12. GOVERNING LAW
Lithuania
