Data Processing Agreement

1. Scope of processing

Subject matter: provision of the UnitFleet platform. Duration: the term of the subscription. Categories of data subjects: the customer's employees, managers and suppliers. Categories of data: identification, contact, employment, scheduling and operational records.

2. Processor obligations

• Process personal data only on documented instructions from the controller.
• Ensure personnel with access are bound by confidentiality.
• Implement appropriate technical and organisational security measures.
• Assist with data subject requests and with security or impact assessments.

3. Sub-processors

The controller gives general authorisation for sub-processors used to host and operate the service. We inform customers of intended changes and allow reasonable objection.

4. International transfers

Data is processed within the EEA where possible. Any transfer outside the EEA relies on an adequacy decision or Standard Contractual Clauses.

5. Security incidents

We notify the controller without undue delay after becoming aware of a personal data breach and provide the information needed for the controller's own notifications.

6. Return and deletion

On termination, we return or delete personal data at the controller's choice, unless retention is required by law.