Data Processing Addendum
Last updated on 24 December 2025.
Last updated on 24 December 2025.
This Data Processing Addendum (“DPA”) forms part of the Service Agreement / Terms of Service (“Agreement”) between ClearNetCrop, Inc holder of Seleqt.ai (“Processor”) and the customer (“Controller”). It applies when Processor processes Personal Data on behalf of Controller under the Agreement.
Definitions
“Personal Data”, “Data Subject”, “Processing”, “Controller”, “Processor” have the meanings in the GDPR (Regulation (EU) 2016/679).
“Applicable Data Protection Law” means GDPR, UK GDPR, or other relevant privacy laws.
“Sub-processor” means third parties engaged by Processor to process Personal Data.
Processing Instructions Processor processes Personal Data only on documented instructions from Controller (including for the Agreement’s purposes) and Applicable Data Protection Law. Processor informs Controller if instructions infringe Applicable Data Protection Law.
Security Processor implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk (as per GDPR Art. 32). Details are available upon reasonable request.
Confidentiality Processor ensures persons authorized to process Personal Data are bound by confidentiality.
Sub-processors Processor may engage Sub-processors. Controller authorizes these appointments. For new Sub-processors, Processor gives at least 10 days’ notice. Controller may object on reasonable data protection grounds; unresolved objections allow termination of affected services. Sub-processor agreements contain obligations equivalent to this DPA. Processor remains liable for Sub-processors.
Breach Notification Processor notifies Controller without undue delay of any Personal Data Breach. Processor provides reasonable information to assist Controller’s obligations.
Data Subject Requests & Assistance Processor provides reasonable assistance to Controller to respond to Data Subject rights requests or regulatory inquiries. Controller handles responses.
Audits & Compliance Processor makes available information reasonably necessary to demonstrate compliance (e.g., via reports like SOC 2 if held). Controller may request an audit once per year (at Controller’s cost) with reasonable notice.
Data Transfers For transfers outside the EEA/UK, parties enter into the 2021 EU Standard Contractual Clauses (Module 2: Controller-to-Processor) and UK Addendum (if applicable), incorporated by reference as Annex 1. Processor will assist with any required Transfer Impact Assessment.
Deletion/Return Upon termination of the Agreement, Processor deletes or returns Personal Data within 30 days (or as instructed), unless required by law to retain.
Liability Each party’s liability under this DPA is limited to the amount payable under the Agreement (or as per Agreement exclusions).
Governing Law Governed by the Agreement’s law.
Data Processing Addendum
Last updated on 24 December 2025.
This Data Processing Addendum (“DPA”) forms part of the Service Agreement / Terms of Service (“Agreement”) between ClearNetCrop, Inc holder of Seleqt.ai (“Processor”) and the customer (“Controller”). It applies when Processor processes Personal Data on behalf of Controller under the Agreement.
Definitions
“Personal Data”, “Data Subject”, “Processing”, “Controller”, “Processor” have the meanings in the GDPR (Regulation (EU) 2016/679).
“Applicable Data Protection Law” means GDPR, UK GDPR, or other relevant privacy laws.
“Sub-processor” means third parties engaged by Processor to process Personal Data.
Processing Instructions Processor processes Personal Data only on documented instructions from Controller (including for the Agreement’s purposes) and Applicable Data Protection Law. Processor informs Controller if instructions infringe Applicable Data Protection Law.
Security Processor implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk (as per GDPR Art. 32). Details are available upon reasonable request.
Confidentiality Processor ensures persons authorized to process Personal Data are bound by confidentiality.
Sub-processors Processor may engage Sub-processors. Controller authorizes these appointments. For new Sub-processors, Processor gives at least 10 days’ notice. Controller may object on reasonable data protection grounds; unresolved objections allow termination of affected services. Sub-processor agreements contain obligations equivalent to this DPA. Processor remains liable for Sub-processors.
Breach Notification Processor notifies Controller without undue delay of any Personal Data Breach. Processor provides reasonable information to assist Controller’s obligations.
Data Subject Requests & Assistance Processor provides reasonable assistance to Controller to respond to Data Subject rights requests or regulatory inquiries. Controller handles responses.
Audits & Compliance Processor makes available information reasonably necessary to demonstrate compliance (e.g., via reports like SOC 2 if held). Controller may request an audit once per year (at Controller’s cost) with reasonable notice.
Data Transfers For transfers outside the EEA/UK, parties enter into the 2021 EU Standard Contractual Clauses (Module 2: Controller-to-Processor) and UK Addendum (if applicable), incorporated by reference as Annex 1. Processor will assist with any required Transfer Impact Assessment.
Deletion/Return Upon termination of the Agreement, Processor deletes or returns Personal Data within 30 days (or as instructed), unless required by law to retain.
Liability Each party’s liability under this DPA is limited to the amount payable under the Agreement (or as per Agreement exclusions).
Governing Law Governed by the Agreement’s law.