Data Processing Agreement

Between Cold-Store Benchmark (“Processor”) and the customer (“Controller”).

This DPA applies to any Personal Data Cold-Store Benchmark processes on the Controller’s behalf in connection with the cold-storage cost benchmarks, market data and related deliverables. Cold-Store Benchmark is operated by R7AD (Yahia Riad Hanniz), sole proprietor, Markham, Ontario, Canada.

1. Roles & allocation of responsibility

The Controller is responsible for the lawfulness of its processing, the accuracy of the data it provides, and satisfying its own regulatory obligations. Cold-Store Benchmark is the Processor and processes data only on the Controller’s documented instructions. Providing the service is not a representation of compliance with any regulation.

2. Permitted processing

Only to: provide and secure the service (deliver purchased reports and data, and related correspondence), comply with law, and improve the product with aggregate non-identifying data. Cold-Store Benchmark shall not use data for unrelated purposes.

3. Sub-processors

Cold-Store Benchmark uses the sub-processors Stripe (payments) and Netlify (hosting & CDN), maintains a current list of them, and informs the Controller of material changes.

4. Security

Appropriate technical and organisational measures (encryption in transit, access controls, least-privilege). Cold-Store Benchmark does not claim a specific certification (e.g. SOC 2, ISO 27001) unless separately obtained.

5. Data subject rights

Cold-Store Benchmark will assist the Controller in responding to data-subject requests (access, correction, deletion, portability) and in complying with applicable data-protection law.

6. Retention & deletion

On termination, Cold-Store Benchmark will delete or return the data as directed, except where retention is required by law. Data is processed only as long as needed for the service or as required by law.

7. International transfers

Where data is transferred outside the EEA/UK, Cold-Store Benchmark will use appropriate safeguards (e.g. Standard Contractual Clauses) to the extent required by law.

8. Liability

Nothing in this DPA alters the liability allocation in the Cold-Store Benchmark Terms of Service.