Data Processing Addendum
Data processing agreement for Ottili ONE customers under GDPR.
Purpose and scope
This Data Processing Addendum (DPA) is entered into between Ottili Electronics (the Data Processor) and the customer (the Data Controller) and forms part of the Ottili ONE Terms of Service. It governs the processing of personal data on behalf of the customer in connection with the use of the Ottili ONE platform.
Data processing
Ottili Electronics will process personal data only as documented in the Ottili ONE Privacy Policy and as necessary to provide the services under the Terms of Service. Processing activities include data storage, backup, security operations, and technical support.
Data security
Ottili Electronics implements appropriate technical and organizational measures to protect personal data, including encryption, access controls, audit logging, and regular security assessments. Data is stored in the EU/EEA or in countries with adequate data protection laws.
Sub-processors
Ottili Electronics may engage sub-processors to provide services. Current sub-processors include cloud infrastructure providers and security services. Customers will be notified of any material changes to the sub-processor list.
Data subject rights
Ottili Electronics will assist the customer in fulfilling data subject rights requests, including access, rectification, erasure, and data portability, to the extent technically feasible and within the scope of the services provided.
Data deletion and return
Upon termination of the agreement, the customer may request deletion or return of personal data. Ottili Electronics will delete or return data within 30 days, except where retention is required by law.
Contact
For DPA-related questions, contact support@ottili.one.
Version 2026.05 • Effective: May 15, 2026
This legal document is published but pending final legal verification. Treat it as provisional until verified.
Governed under T-Q1-WEB-0199: added effective date, status and approval governance to the DPA.