Data Processing Addendum
Hurema provides HRMS and attendance software services for businesses managing employee and payroll information. This Data Processing Addendum ("DPA") sets out the general terms governing the processing of personal data in connection with the Hurema service.
1. Scope
This DPA applies to the processing of personal data by Hurema on behalf of its customers in connection with the provision of Hurema's HRMS, payroll, attendance, and device-related services.
2. Roles and responsibilities
Hurema acts as a processor when processing personal data under the instruction of the customer, who remains the controller or joint controller for the lawful basis of processing and the purposes for which personal data is collected and used.
3. Data security
Hurema will implement and maintain reasonable administrative, technical, and organisational measures appropriate to the sensitivity of the personal data being processed, including access controls, secure hosting, monitoring, and incident response processes.
4. Confidentiality
Hurema personnel are expected to handle customer data in a confidential manner and only access information necessary to provide the service or comply with applicable law.
5. International transfers
Where personal data is transferred outside the customer’s country of operations, Hurema will use lawful transfer mechanisms as applicable and will work with customers to support their data protection compliance obligations.
6. Sub-processors
Hurema may use trusted third-party service providers to support hosting, infrastructure, analytics, customer support, and related services. Any such use shall be subject to appropriate contractual commitments and security controls.
7. Retention and deletion
Data will be retained only for as long as necessary to provide the service, meet legal obligations, or resolve disputes. Customers may request export or deletion of their data in accordance with the terms of their service agreement.
8. Assistance and support
Hurema will cooperate with customers to support their response to data subject requests, security incidents, and compliance obligations where reasonably required and permissible under the service agreement.
For a custom or customer-specific agreement, please contact Hurema support and request a formal DPA or a review of your processing requirements.