Data Processing Terms

1. Roles. The company is the controller of the personal data it enters into RTS Book. We are the processor.

2. Instructions. We process the data only to provide the service, on the company's instructions. The Terms & Conditions and the company's use of the service are those instructions.

3. Confidentiality. Our staff may access the data only when needed to run, support or secure the service. They are bound by confidentiality.

4. Security. We apply the security measures described in our Privacy Policy.

5. Service providers. The company agrees that we may use third-party service providers to run the service. We give a list of them to a company on request.

6. Processing outside the UAE. Our service providers may process data outside the United Arab Emirates, with the safeguards described in our Privacy Policy.

7. Requests from individuals. If a person asks us about data that a company entered, we pass the request to that company.

8. Security incidents. If we become aware of a security incident that affects the company's personal data, we will tell the company as soon as we become aware of it, with the information we have, so that it can meet its own reporting duties.

9. End of service. Access, export and deletion after the end of a subscription follow section 4 of the Terms & Conditions.

10. Liability. The limits of liability in the Terms & Conditions apply to these Data Processing Terms.

11. Proof of compliance. On the company's written request, we will provide the information reasonably needed to show that we meet these Data Processing Terms. We do not allow on-site inspections unless the law requires them.

12. Our service providers. We require the service providers that process the company's personal data for us to protect it with obligations equivalent to these terms.