Standard DPA
Surya Marketing s.r.o., Company ID 23240253, registered office Korunní 2569/108, Vinohrady, 10100 Prague 10, Czech Republic, offers a standard DPA per GDPR Article 28 to all customers. Download the DPA template (PDF), sign electronically or by hand, and email to info@suryatool.io. You'll receive a signed copy back within 24 hours.
Subprocessors
The current subprocessor list (Article 28(2) GDPR) is in the Privacy section. Changes are communicated by email 30 days in advance.
SCC for international transfer
For AI inference and embeddings (Anthropic, OpenAI), data leaves the EU. For this transfer we have Standard Contractual Clauses (SCC) per EU 2021/914 + Transfer Impact Assessment available on request.
Custom DPA
Enterprise customers can request a custom DPA with bespoke clauses (data residence, custom retention windows, dedicated subprocessor allowlist). Contact: info@suryatool.io.
Data deletion (Article 17)
After contract termination we delete all personal data within 30 days. Audit log is retained for 24 months (statutory accounting requirement). Detail in Data Deletion.