Data Processing Addendum

Roles

For personal data you enter about your own clients (names, addresses, contact details on invoices and time entries), you are the controller and MB Nexus Consulting (Lithuania) is the processor, processing that data solely to provide the Tallymeter service on your documented instructions — i.e. the features you use.

Commitments

• Processing only within the EU for storage (Hetzner, Germany); the subprocessors listed in the Privacy Policy are authorized; we notify material subprocessor changes on the changelog.
• Confidentiality, encryption in transit (TLS 1.2+) and at rest for sensitive fields, access limited to what operating the service requires.
• We assist with data-subject requests and breach notifications without undue delay (and within 72 hours for breaches affecting your data).
• On account deletion, your clients' personal data is deleted with the rest of your account data within 30 days.
• Standard Contractual Clauses apply where a listed subprocessor processes data outside the EU/EEA.

Questions

Need a signed copy or have DPA questions? Email [email protected].