1. Roles
Where the customer determines the essential purposes and means of orders, reservations, newsletters, invoicing or similar operations, the customer acts as controller and ez Connect as processor for that processing.
2. Instructions
ez Connect processes data on the customer’s behalf to provide the contracted feature, support and continuity under documented instructions. ez Connect’s permitted independent purposes — including security, fraud prevention, compliance, administration of its own contractual relationship and defense — are carried out in its role as an independent controller and are governed by the Privacy Notice rather than by the customer’s processor instructions.
3. Confidentiality and access
Need-to-know access, confidentiality duties and proportionate technical/organizational controls apply.
4. Providers
Necessary subprocessors may be used for infrastructure, communication or operations; see /legal/subprocessors/.
5. Rights and incidents
The parties reasonably cooperate on data-subject requests, incidents, valid authority requests, exports and deletion.
6. Termination
Export, blocking, retention and deletion follow the retention policy and legal duties.