Two possible roles
For its own contacts, contracts and operations, Salama Forever SRL acts as controller. When a client determines why and how staff, prospect or user data is processed in a Karvanis solution, the client is generally the controller and Salama Forever SRL may act as processor.
Governance before production
Where GDPR Article 28 applies, a data processing agreement must specify subject, duration, nature, purposes, data and person categories, instructions, confidentiality, security, subprocessors, rights assistance, breaches, return and deletion.
Proportionate design
- Limit data to validated needs.
- Define roles and access rights.
- Plan retention and deletion.
- Document hosting and providers.
- Test security before production.
- Assess the need for a data protection impact assessment where processing is high risk.
These elements are adapted to the project and included in the contract or appendices. This information page does not replace a signed agreement.