Data Processing Agreement (simplified DPA)

Summary of the data processing commitments between the customer (data controller) and MATCHA CORP / EasyBankFlow (data processor).

Parties

This data processing agreement is entered into between the Customer (data controller) and MATCHA CORP (SIREN 984 597 591), publisher of the EasyBankFlow service, acting as data processor within the meaning of Article 28 of the GDPR.

Roles of the parties

The Customer acts as data controller for the data of its own beneficiaries (employees, creditors, debtors) contained in the submitted files. MATCHA CORP acts as data processor for the operations strictly necessary to provide the conversion service.

Processing on instruction

Data submitted via EasyBankFlow is processed only according to the Customer's documented instructions and within the limits of the features actually provided. MATCHA CORP does not use it for any other purpose.

Security measures

MATCHA CORP applies appropriate technical and organizational measures: encryption of data in transit (HTTPS/TLS), secure hosting at Render.com on servers located in the European Union (Frankfurt, Germany), data access limited to strictly necessary personnel, access logging.

Sub-processors

MATCHA CORP uses the following sub-processors: Render Services, Inc. (hosting, servers in the European Union — Frankfurt), Stackhero (database, hosted in France), Stripe, Inc. (payments), Mailjet SAS (emails). The Client is informed of any change of sub-processor that may affect data protection guarantees.

Assistance and data subject rights

MATCHA CORP assists the Customer as far as possible in responding to data subject rights requests and in meeting the obligations set out in Articles 32 to 36 of the GDPR.

GDPR / security contact: contact@easybankflow.com