This Data Protection Addendum (“DPA”) forms part of the agreement between TechNova Imaging Systems Pvt. Ltd. (“TISPL”) and its customers, vendors, or partners (“Data Subjects”) and outlines the responsibilities and obligations regarding personal data processing under applicable data protection laws.

1. Definitions

• “Personal Data” means any information relating to an identified or identifiable individual.
• “Processing” means any operation performed on Personal Data, such as collection, storage, use, disclosure or deletion.

2. Data Processing Obligations

TISPL shall:

• Process Personal Data only for legitimate business purposes.
• Implement appropriate technical and organizational measures to protect Personal Data.
• Ensure confidentiality and restrict access to authorized personnel only.

3. Data Subject Rights

TISPL shall facilitate the exercise of Data Subject rights, including:

• Right to access and rectify Personal Data.
• Right to erasure and restriction of processing.
• Right to data portability and objection to processing.

4. Subprocessors

TISPL may engage subprocessors to process Personal Data. TISPL shall ensure that subprocessors comply with the same data protection obligations.

5. Data Breach Notification

In the event of a data breach, TISPL shall notify affected Data Subjects and relevant authorities as required by law.

6. Data Retention

TISPL shall retain Personal Data only as long as necessary for the purposes for which it was collected or as required by law.

7. Governing Law

This DPA shall be governed by and construed in accordance with the laws of India.

8. Contact Information

For any questions regarding this DPA, please contact: privacy@TISPL.com