Data Processing Addendum

This DPA forms part of the agreement between Zakkini (Hani Labs LTD) and the client for Services that involve the processing of personal data subject to the EU GDPR and/or UK GDPR.

Roles & Scope

Client is the Controller; Zakkini is the Processor for personal data processed to deliver the Services.

Processor Obligations

• Process personal data only on documented instructions
• Implement appropriate technical and organisational security measures
• Assist the Controller with data subject requests and DPIAs where applicable
• Confidentiality for personnel and sub‑processor controls
• Breach notification without undue delay

Sub‑Processors

Zakkini may use sub‑processors with appropriate contractual safeguards and will maintain a list upon request.

International Transfers

Transfers outside the UK/EU will rely on the UK International Data Transfer Addendum and/or EU SCCs as applicable.

Audit & Records

Zakkini will make available all information necessary to demonstrate compliance and allow audits by the Controller or its auditor, subject to reasonable notice and confidentiality.

Termination & Return/Deletion

Upon termination of Services, personal data will be deleted or returned, unless retention is required by law.