Data Processing Agreement

1. Roles

For personal information submitted and controlled by an organisation:

• The organisation acts as the data controller.
• Resenda acts as the data processor.

Resenda may separately act as a controller for information it needs to manage its own accounts, security, legal obligations, and operation of the service.

2. Processing

Resenda will process organisation-controlled personal information only as reasonably necessary to provide Resenda and in accordance with the organisation's instructions and applicable data protection requirements.

This may include storing, organising, displaying, reviewing, structuring, and processing payment evidence and related information.

3. Confidentiality and security

Resenda will take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.

People authorised to process the information are expected to maintain appropriate confidentiality.

4. Service providers

Resenda may use trusted technology and service providers to support hosting, storage, authentication, communications, security, and other services required to operate the platform.

Resenda remains responsible for managing these providers appropriately.

5. Data subject requests

Where appropriate, Resenda will reasonably assist an organisation in responding to requests relating to personal information processed through Resenda.

Where the organisation controls the information, the organisation remains primarily responsible for responding to individuals exercising their applicable rights.

6. Security incidents

Where Resenda becomes aware of a personal data breach affecting organisation-controlled information, Resenda will notify the organisation without undue delay and provide reasonably available information needed to assess and respond to the incident.

7. International processing

Some service providers may process information outside Nigeria. Where applicable, Resenda will take reasonable steps to ensure appropriate safeguards are in place.

8. Deletion

When an organisation closes its account or requests deletion, Resenda will delete or return organisation-controlled information where reasonably practicable, subject to legal, security, backup, dispute-resolution, or other legitimate retention requirements.

9. Contact

For questions concerning this Agreement: Resenda, Nigeria. Email: resendamail@gmail.com.