Data Processing Agreement

This DPA forms part of the Terms of Service between 4TheBold ("Processor") and the User ("Controller"). It applies to all activities where the Processor handles Personal Data on behalf of the Controller.

Processor shall implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Pseudonymization and encryption of personal data.
• Ability to ensure the ongoing confidentiality, integrity, availability, and resilience of processing systems.
• Regular testing, assessing, and evaluating the effectiveness of technical measures.

Processor shall assist the Controller by appropriate technical and organizational measures, insofar as this is possible, for the fulfilment of the Controller's obligation to respond to requests for exercising the data subject's rights laid down in Chapter III of the GDPR.

Controller grants Processor general authorization to engage sub-processors. Processor shall inform Controller of any intended changes concerning the addition or replacement of other sub-processors.

Current sub-processors include: AWS (Hosting), Stripe (Payments), MongoDB Atlas (Database).

If Processor transfers Personal Data to countries outside the EEA, it shall ensure that such transfers are supported by an appropriate legal basis, such as the EU Standard Contractual Clauses (SCCs).