Data Processing Addendum

This Data Processing Addendum ("DPA") forms part of the agreement between SwissZar LLC ("Processor") and the creator ("Controller") using the Sellora platform to process personal data of buyers, students or members.

1. Roles

The Controller determines the purposes and means of processing personal data of their own customers. The Processor processes such personal data on behalf of the Controller in accordance with documented instructions.

2. Scope

The Processor processes the personal data necessary to provide the Sellora platform (e.g. account, order, access and delivery data).

3. Security

The Processor implements appropriate technical and organizational measures as described on the Security page.

4. Subprocessors

The Controller authorizes the Processor to engage the subprocessors listed on the Subprocessors page.

5. International transfers

Where personal data is transferred outside the EEA or other regulated regions, appropriate safeguards (e.g. Standard Contractual Clauses) apply.

6. Data subject requests

The Processor assists the Controller, to the extent reasonable, in responding to data subject requests.

7. Termination

Upon termination, the Processor will delete or return personal data as required, subject to legal retention obligations.