{"id":27196,"date":"2026-07-01T10:31:53","date_gmt":"2026-07-01T10:31:53","guid":{"rendered":"https:\/\/codico.io\/data-processing-agreement\/"},"modified":"2026-07-01T10:31:53","modified_gmt":"2026-07-01T10:31:53","slug":"data-processing-agreement","status":"publish","type":"page","link":"https:\/\/codico.io\/es\/data-processing-agreement\/","title":{"rendered":"DATA PROCESSING AGREEMENT (DPA)"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\r\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

Version 1.0<\/b><\/span><\/p>\n

\u00a0<\/p>\n

This Data Processing Agreement (“DPA”) forms part of and supplements the Terms of Service, Subscription Agreement, Order Form or other agreement governing the use of CodiCo Dispatch Software (the “Main Agreement”) entered into between:<\/span><\/p>\n

\u00a0<\/p>\n

BILTO GROUP LLC<\/b>, a company incorporated in the United Arab Emirates, operating CodiCo Dispatch Software (“Processor”),<\/span><\/span><\/p>\n

\u00a0<\/p>\n

and<\/span><\/p>\n

\u00a0<\/p>\n

Customer<\/b>, acting as a controller of personal data (“Controller”).<\/span><\/span><\/p>\n

\u00a0<\/p>\n

The Controller and the Processor are collectively referred to as the “Parties”.<\/span><\/p>\n

\u00a0<\/p>\n

1. PURPOSE<\/b><\/span><\/h2>\n

This DPA governs the Processing of Personal Data by Processor on behalf of Controller in connection with the provision of CodiCo Dispatch Software and related services.<\/span><\/p>\n

\u00a0<\/p>\n

The Parties acknowledge that Controller determines the purposes and means of Processing Personal Data and acts as the Controller, while Processor acts solely as a Processor under Article 28 GDPR.<\/span><\/p>\n

\u00a0<\/p>\n

2. DEFINITIONS<\/b><\/span><\/h2>\n

“Personal Data”, “Controller”, “Processor”, “Data Subject”, “Processing”, “Supervisory Authority” and other capitalized terms shall have the meanings assigned to them under the GDPR.<\/span><\/p>\n

\u00a0<\/p>\n

“Customer Data” means all Personal Data submitted, stored, transmitted or otherwise processed through CodiCo Dispatch Software by or on behalf of Controller.<\/span>
<\/span><\/span><\/p>\n

\u00a0<\/p>\n

3. NATURE OF PROCESSING<\/b><\/span><\/h2>\n

Processor provides cloud-based dispatch, booking, fleet management, driver management, passenger management, scheduling, reporting, communication and related services.<\/span><\/p>\n

\u00a0<\/p>\n

Processing may include:<\/span><\/p>\n

\u00a0<\/p>\n

    \n
  • \u25cf collection;<\/span><\/li>\n
  • \u25cf storage;<\/span><\/li>\n
  • \u25cf organization;<\/span><\/li>\n
  • \u25cf retrieval;<\/span><\/li>\n
  • \u25cf consultation;<\/span><\/li>\n
  • \u25cf transmission;<\/span><\/li>\n
  • \u25cf synchronization;<\/span><\/li>\n
  • \u25cf deletion;<\/span><\/li>\n
  • \u25cf analysis necessary for operation of the service.<\/span><\/li>\n<\/ul>\n

    \u00a0<\/p>\n

    Processor shall Process Personal Data solely for the purpose of providing the Services and in accordance with documented instructions from Controller.<\/span><\/p>\n

    \u00a0<\/p>\n

    4. CATEGORIES OF DATA SUBJECTS<\/b><\/span><\/h2>\n

    The categories of Data Subjects may include:<\/span><\/p>\n

    \u00a0<\/p>\n

      \n
    • \u25cf passengers;<\/span><\/li>\n
    • \u25cf customers;<\/span><\/li>\n
    • \u25cf drivers;<\/span><\/li>\n
    • \u25cf dispatchers;<\/span><\/li>\n
    • \u25cf operators;<\/span><\/li>\n
    • \u25cf administrators;<\/span><\/li>\n
    • \u25cf employees of Controller;<\/span><\/li>\n
    • \u25cf business contacts.<\/span><\/li>\n<\/ul>\n
      \u00a0<\/h6>\n

      5. CATEGORIES OF PERSONAL DATA<\/b><\/span><\/h2>\n

      The categories of Personal Data may include:<\/span><\/p>\n

      \u00a0<\/p>\n

        \n
      • \u25cf names;<\/span><\/li>\n
      • \u25cf email addresses;<\/span><\/li>\n
      • \u25cf telephone numbers;<\/span><\/li>\n
      • \u25cf booking information;<\/span><\/li>\n
      • \u25cf trip information;<\/span><\/li>\n
      • \u25cf pickup and drop-off locations;<\/span><\/li>\n
      • \u25cf driver information;<\/span><\/li>\n
      • \u25cf vehicle information;<\/span><\/li>\n
      • \u25cf account credentials;<\/span><\/li>\n
      • \u25cf GPS and location data;<\/span><\/li>\n
      • \u25cf communication logs;<\/span><\/li>\n
      • \u25cf service usage information.<\/span><\/li>\n<\/ul>\n

        \u00a0<\/p>\n

        Controller shall not upload or submit special categories of personal data under Article 9 GDPR unless expressly agreed in writing.<\/span><\/p>\n

        \u00a0<\/p>\n

        Processor does not require or request copies of passports, driver’s licenses, medical records or other special-category data.<\/span><\/p>\n

        \u00a0<\/p>\n

        6. CUSTOMER RESPONSIBILITIES<\/b><\/span><\/h2>\n

        Controller warrants that:<\/span><\/p>\n

        \u00a0<\/p>\n

          \n
        1. a) it has a lawful basis for Processing Personal Data;<\/span><\/li>\n
        2. b) it has provided all required notices to Data Subjects;<\/span><\/li>\n
        3. c) it is solely responsible for the accuracy, quality and legality of Customer Data;<\/span><\/li>\n
        4. d) it has obtained all necessary consents where required.<\/span><\/li>\n<\/ol>\n

          \u00a0<\/p>\n

          Controller remains solely responsible for compliance with GDPR and applicable privacy laws.<\/span><\/p>\n

          \u00a0<\/h6>\n

          7. PROCESSOR OBLIGATIONS<\/b><\/span><\/h2>\n

          Processor shall:<\/span><\/p>\n

          \u00a0<\/p>\n

            \n
          1. a) Process Personal Data only on documented instructions from Controller;<\/span><\/li>\n
          2. b) ensure confidentiality of personnel with access to Personal Data;<\/span><\/li>\n
          3. c) implement appropriate technical and organizational measures;<\/span><\/li>\n
          4. d) assist Controller in responding to Data Subject requests where reasonably possible;<\/span><\/li>\n
          5. e) notify Controller without undue delay after becoming aware of a Personal Data Breach affecting Customer Data;<\/span><\/li>\n
          6. f) provide reasonable assistance regarding GDPR compliance obligations.<\/span><\/li>\n<\/ol>\n

            \u00a0<\/p>\n

            8. SECURITY MEASURES<\/b><\/span><\/h2>\n

            Processor shall maintain reasonable and appropriate administrative, technical and organizational safeguards designed to protect Customer Data against unauthorized access, disclosure, alteration or destruction.<\/span><\/p>\n

            \u00a0<\/p>\n

            Security measures may include:<\/span><\/p>\n

            \u00a0<\/p>\n

              \n
            • \u25cf HTTPS encryption;<\/span><\/li>\n
            • \u25cf access controls;<\/span><\/li>\n
            • \u25cf authentication procedures;<\/span><\/li>\n
            • \u25cf role-based permissions;<\/span><\/li>\n
            • \u25cf backups;<\/span><\/li>\n
            • \u25cf firewall protection;<\/span><\/li>\n
            • \u25cf monitoring and logging;<\/span><\/li>\n
            • \u25cf software security updates.<\/span><\/li>\n<\/ul>\n

              \u00a0<\/p>\n

              Processor does not guarantee that the Services will be free from all vulnerabilities or security incidents.<\/span><\/p>\n

              \u00a0<\/h6>\n

              9. SUBPROCESSORS<\/b><\/span><\/h2>\n

              Controller grants Processor general authorization to engage Subprocessors.<\/span><\/p>\n

              \u00a0<\/p>\n

              Processor may add, replace or remove Subprocessors from time to time as reasonably necessary for providing the Services.<\/span><\/p>\n

              \u00a0<\/p>\n

              Processor shall maintain an up-to-date list of Subprocessors and make such information available upon request.<\/span><\/p>\n

              \u00a0<\/p>\n

              Processor shall remain responsible for the performance of its Subprocessors to the extent required by applicable law.<\/span><\/p>\n

              \u00a0<\/p>\n

              Third-party services independently selected, connected or configured by Controller shall not be considered Subprocessors of Processor.<\/span><\/p>\n

              \u00a0<\/p>\n

              10. INTERNATIONAL DATA TRANSFERS<\/b><\/span><\/h2>\n

              Controller acknowledges that Customer Data may be accessed, processed or transferred internationally where necessary for the operation, maintenance, support and delivery of the Services.<\/span><\/p>\n

              \u00a0<\/p>\n

              Processor shall implement appropriate safeguards where required under applicable data protection laws.<\/span><\/p>\n

              \u00a0<\/p>\n

              11. DATA SUBJECT REQUESTS<\/b><\/span><\/h2>\n

              Where Processor receives a request directly from a Data Subject relating to Customer Data, Processor may redirect the Data Subject to Controller.<\/span><\/p>\n

              \u00a0<\/p>\n

              Processor shall provide reasonable assistance to Controller in responding to such requests where required by law.<\/span><\/p>\n

              \u00a0<\/h6>\n

              12. AUDIT RIGHTS<\/b><\/span><\/h2>\n

              Controller may request information reasonably necessary to demonstrate compliance with this DPA.<\/span><\/p>\n

              \u00a0<\/p>\n

              Physical inspections, penetration testing, source code reviews, vulnerability scans, access to internal systems, access to confidential business information, or access to data relating to other customers shall not be required.<\/span><\/p>\n

              \u00a0<\/p>\n

              Any audit shall:<\/span><\/p>\n

              \u00a0<\/p>\n

                \n
              • \u25cf occur no more than once per calendar year;<\/span><\/li>\n
              • \u25cf be conducted during normal business hours;<\/span><\/li>\n
              • \u25cf be subject to at least 30 days prior written notice;<\/span><\/li>\n
              • \u25cf not interfere with Processor’s operations;<\/span><\/li>\n
              • \u25cf be at Controller’s expense.<\/span><\/li>\n<\/ul>\n

                \u00a0<\/p>\n

                13. RETURN AND DELETION OF DATA<\/b><\/span><\/h2>\n

                Upon termination of the Services, Customer Data shall remain available for export for ten (10) days.<\/span><\/p>\n

                \u00a0<\/p>\n

                Following such period, Customer Data shall be permanently deleted from production systems.<\/span><\/p>\n

                \u00a0<\/p>\n

                Residual copies contained in backups may remain until overwritten in accordance with Processor’s backup retention procedures.<\/span><\/p>\n

                \u00a0<\/p>\n

                14. LIMITATION OF LIABILITY<\/b><\/span><\/h2>\n

                To the maximum extent permitted by law, Processor’s aggregate liability arising out of or related to this DPA shall not exceed the total fees paid by Controller to Processor during the twelve (12) months immediately preceding the event giving rise to the claim.<\/span><\/p>\n

                \u00a0<\/p>\n

                Processor shall not be liable for indirect, incidental, consequential, special, punitive or exemplary damages, including loss of revenue, profits, goodwill, business opportunities or data.<\/span><\/p>\n

                \u00a0<\/p>\n

                Nothing in this DPA limits liability where such limitation is prohibited by applicable law.<\/span><\/p>\n

                \u00a0<\/p>\n

                14.1 INDEMNIFICATION BY CONTROLLER<\/b><\/span><\/h3>\n

                The Controller shall indemnify and hold harmless the Processor against claims, fines, penalties, damages or expenses arising from:<\/span><\/p>\n

                \u00a0<\/p>\n

                  \n
                • \u25cf unlawful collection of Personal Data by the Controller;<\/span><\/li>\n
                • \u25cf absence of a lawful basis for Processing;<\/span><\/li>\n
                • \u25cf failure to provide required notices to Data Subjects;<\/span><\/li>\n
                • \u25cf instructions provided by the Controller that violate applicable law.<\/span><\/li>\n<\/ul>\n

                  \u00a0<\/p>\n

                  15. GOVERNING LAW<\/b><\/span><\/h2>\n

                  This DPA shall be governed by the law specified in the Main Agreement.<\/span><\/p>\n

                  \u00a0<\/p>\n

                  In the absence of such provision, the laws of the United Arab Emirates shall apply.<\/span><\/p>\n

                  \u00a0<\/p>\n

                  16. ORDER OF PRECEDENCE<\/b><\/span><\/h2>\n

                  In the event of any conflict between this DPA and the Main Agreement, this DPA shall prevail solely with respect to data protection matters.<\/span><\/p>\n

                  \u00a0<\/p>\n

                  17. TERM AND TERMINATION<\/b><\/span><\/h2>\n

                  This DPA shall become effective on the date the Controller first accepts the Main Agreement, creates an account, accesses the Services, or otherwise uses the Services, whichever occurs first.<\/span><\/p>\n

                  \u00a0<\/p>\n

                  This DPA shall remain in effect for as long as the Processor Processes Personal Data on behalf of the Controller.<\/span><\/p>\n

                  \u00a0<\/p>\n

                  Termination or expiration of the Main Agreement shall automatically terminate this DPA, except to the extent that the Processor continues to Process Personal Data after such termination for the purposes of data retention, legal compliance, backup retention, dispute resolution, enforcement of contractual rights, or other legitimate business purposes permitted by applicable law.<\/span><\/p>\n

                  \u00a0<\/p>\n

                  The provisions relating to confidentiality, liability, audits, international transfers, data deletion, dispute resolution and any other provisions which by their nature are intended to survive termination shall remain in effect following termination of this DPA.<\/span><\/p>\n

                  \u00a0<\/p>\n

                  Upon termination of the Services, Customer Data shall be handled in accordance with Section 13 (Return and Deletion of Data).<\/span><\/p>\n

                  \u00a0<\/p>\n

                  Termination of this DPA shall not relieve either Party of any obligations accrued prior to the effective date of termination.<\/span><\/p>\n

                  \u00a0<\/p>\n

                  ANNEX A<\/b>
                  <\/b>DETAILS OF PROCESSING<\/b><\/span><\/h2>\n

                  \u00a0<\/p>\n

                  A. SUBJECT MATTER OF PROCESSING<\/b><\/span><\/h3>\n

                  The Processor provides cloud-based transportation dispatch, booking management, driver management, passenger management, fleet management, communication, scheduling, reporting and related software services through the CodiCo Dispatch Software platform.<\/span><\/p>\n

                  \u00a0<\/p>\n

                  B. PURPOSE OF PROCESSING<\/b><\/span><\/h3>\n

                  Personal Data is processed solely for the purpose of:<\/span><\/p>\n

                  \u00a0<\/p>\n

                    \n
                  • \u25cf providing the Services;<\/span><\/li>\n
                  • \u25cf managing transportation bookings;<\/span><\/li>\n
                  • \u25cf dispatching and assigning trips;<\/span><\/li>\n
                  • \u25cf managing drivers and vehicles;<\/span><\/li>\n
                  • \u25cf facilitating communication between passengers, drivers and dispatchers;<\/span><\/li>\n
                  • \u25cf generating reports and analytics;<\/span><\/li>\n
                  • \u25cf customer support;<\/span><\/li>\n
                  • \u25cf maintaining security, availability and performance of the Services.<\/span><\/li>\n<\/ul>\n

                    \u00a0<\/p>\n

                    C. DURATION OF PROCESSING<\/b><\/span><\/h3>\n

                    Processing shall continue for the duration of the Customer’s active subscription.<\/span><\/p>\n

                    \u00a0<\/p>\n

                    Upon termination of the Services, Customer Data shall remain available for export for ten (10) days.<\/span><\/p>\n

                    \u00a0<\/p>\n

                    Following such period, Customer Data shall be deleted in accordance with the DPA.<\/span><\/p>\n

                    \u00a0<\/p>\n

                    D. CATEGORIES OF DATA SUBJECTS<\/b><\/span><\/h3>\n

                    The categories of Data Subjects may include:<\/span><\/p>\n

                    \u00a0<\/p>\n

                    Passengers<\/b><\/span><\/h4>\n
                      \n
                    • \u25cf customers<\/span><\/li>\n
                    • \u25cf passengers<\/span><\/li>\n
                    • \u25cf travellers<\/span><\/li>\n<\/ul>\n

                      Drivers<\/b><\/span><\/h4>\n
                        \n
                      • \u25cf employed drivers<\/span><\/li>\n
                      • \u25cf contracted drivers<\/span><\/li>\n
                      • \u25cf owner-operators<\/span><\/li>\n<\/ul>\n

                        Customer Personnel<\/b><\/span><\/h4>\n
                          \n
                        • \u25cf dispatchers<\/span><\/li>\n
                        • \u25cf operators<\/span><\/li>\n
                        • \u25cf administrators<\/span><\/li>\n
                        • \u25cf managers<\/span><\/li>\n
                        • \u25cf employees<\/span><\/li>\n
                        • \u25cf contractors<\/span><\/li>\n<\/ul>\n

                          Business Contacts<\/b><\/span><\/h4>\n
                            \n
                          • \u25cf suppliers<\/span><\/li>\n
                          • \u25cf partners<\/span><\/li>\n
                          • \u25cf agents<\/span><\/li>\n
                          • \u25cf affiliates<\/span><\/li>\n<\/ul>\n

                            \u00a0<\/p>\n

                            E. CATEGORIES OF PERSONAL DATA<\/b><\/span><\/h3>\n

                            Passenger Data<\/b><\/span><\/h4>\n
                              \n
                            • \u25cf first name<\/span><\/li>\n
                            • \u25cf last name<\/span><\/li>\n
                            • \u25cf email address<\/span><\/li>\n
                            • \u25cf telephone number<\/span><\/li>\n
                            • \u25cf pickup address<\/span><\/li>\n
                            • \u25cf destination address<\/span><\/li>\n
                            • \u25cf booking information<\/span><\/li>\n
                            • \u25cf trip history<\/span><\/li>\n<\/ul>\n

                              Driver Data<\/b><\/span><\/h4>\n
                                \n
                              • \u25cf first name<\/span><\/li>\n
                              • \u25cf last name<\/span><\/li>\n
                              • \u25cf email address<\/span><\/li>\n
                              • \u25cf telephone number<\/span><\/li>\n
                              • \u25cf vehicle information<\/span><\/li>\n
                              • \u25cf availability status<\/span><\/li>\n
                              • \u25cf GPS location data<\/span><\/li>\n
                              • \u25cf trip assignments<\/span><\/li>\n<\/ul>\n

                                Operational Data<\/b><\/span><\/h4>\n
                                  \n
                                • \u25cf account information<\/span><\/li>\n
                                • \u25cf login records<\/span><\/li>\n
                                • \u25cf activity logs<\/span><\/li>\n
                                • \u25cf communication logs<\/span><\/li>\n
                                • \u25cf service usage information<\/span><\/li>\n<\/ul>\n

                                  Location Data<\/b><\/span><\/h4>\n
                                    \n
                                  • \u25cf vehicle locations<\/span><\/li>\n
                                  • \u25cf driver locations<\/span><\/li>\n
                                  • \u25cf trip routes<\/span><\/li>\n
                                  • \u25cf dispatch information<\/span><\/li>\n<\/ul>\n
                                    \u00a0<\/h6>\n

                                    F. SPECIAL CATEGORIES OF DATA<\/b><\/span><\/h3>\n

                                    The Services are not intended for the processing of Special Categories of Personal Data as defined by Article 9 GDPR.<\/span><\/p>\n

                                    \u00a0<\/p>\n

                                    The Controller shall not upload or otherwise provide such data unless expressly agreed in writing by the Processor.<\/span><\/p>\n

                                    \u00a0<\/p>\n

                                    The Processor reserves the right to remove such data where reasonably necessary to protect the integrity and compliance of the Services.<\/span><\/p>\n

                                    \u00a0<\/p>\n

                                    ANNEX B<\/b>
                                    <\/b>TECHNICAL AND ORGANIZATIONAL MEASURES<\/b><\/span><\/h2>\n

                                    The Processor maintains reasonable and appropriate technical and organizational measures designed to protect Customer Data.<\/span><\/p>\n

                                    \u00a0<\/p>\n

                                    The following measures may be implemented and updated from time to time:<\/span><\/p>\n

                                    \u00a0<\/p>\n

                                    1. ACCESS CONTROL<\/b><\/span><\/h3>\n
                                      \n
                                    • \u25cf password-protected systems;<\/span><\/li>\n
                                    • \u25cf role-based permissions;<\/span><\/li>\n
                                    • \u25cf restricted employee access;<\/span><\/li>\n
                                    • \u25cf least-privilege principles;<\/span><\/li>\n
                                    • \u25cf user authentication mechanisms.<\/span><\/li>\n<\/ul>\n

                                      \u00a0<\/p>\n

                                      2. NETWORK SECURITY<\/b><\/span><\/h3>\n
                                        \n
                                      • \u25cf HTTPS\/TLS encrypted communications;<\/span><\/li>\n
                                      • \u25cf firewall protection;<\/span><\/li>\n
                                      • \u25cf infrastructure security controls;<\/span><\/li>\n
                                      • \u25cf monitoring and logging.<\/span><\/li>\n<\/ul>\n

                                        \u00a0<\/p>\n

                                        3. DATA SECURITY<\/b><\/span><\/h3>\n
                                          \n
                                        • \u25cf logical separation of customer environments;<\/span><\/li>\n
                                        • \u25cf controlled access to Customer Data;<\/span><\/li>\n
                                        • \u25cf backup procedures;<\/span><\/li>\n
                                        • \u25cf secure deletion procedures.<\/span><\/li>\n<\/ul>\n

                                          \u00a0<\/p>\n

                                          4. PERSONNEL SECURITY<\/b><\/span><\/h3>\n

                                          Authorized personnel are subject to confidentiality obligations.<\/span><\/p>\n

                                          \u00a0<\/p>\n

                                          Access to Customer Data is granted only where reasonably necessary for:<\/span><\/p>\n

                                          \u00a0<\/p>\n

                                            \n
                                          • \u25cf customer support;<\/span><\/li>\n
                                          • \u25cf maintenance;<\/span><\/li>\n
                                          • \u25cf troubleshooting;<\/span><\/li>\n
                                          • \u25cf service delivery.<\/span><\/li>\n<\/ul>\n

                                            \u00a0<\/p>\n

                                            5. REMOTE ACCESS<\/b><\/span><\/h3>\n

                                            The Processor operates a distributed workforce.<\/span><\/p>\n

                                            \u00a0<\/p>\n

                                            Authorized personnel may access Customer Data remotely from various jurisdictions solely for legitimate business purposes related to the Services.<\/span><\/p>\n

                                            \u00a0<\/p>\n

                                            Such access is limited to authorized personnel and subject to security controls.<\/span><\/p>\n

                                            \u00a0<\/p>\n

                                            6. INCIDENT MANAGEMENT<\/b><\/span><\/h3>\n

                                            The Processor maintains procedures designed to identify, investigate and respond to security incidents.<\/span><\/p>\n

                                            \u00a0<\/p>\n

                                            Where required by applicable law, the Controller shall be notified without undue delay after the Processor becomes aware of a Personal Data Breach affecting Customer Data.<\/span><\/p>\n

                                            \u00a0<\/p>\n

                                            7. TESTING AND MAINTENANCE<\/b><\/span><\/h3>\n

                                            The Processor performs ongoing maintenance, monitoring and security updates appropriate to the nature of the Services.<\/span><\/p>\n

                                            \u00a0<\/p>\n

                                            The Processor does not warrant or guarantee absolute security or uninterrupted operation of the Services.<\/span><\/p>\n

                                            \u00a0<\/p>\n

                                            8. MODIFICATIONS<\/b><\/span><\/h3>\n

                                            The Processor may modify, enhance or replace security measures from time to time provided that the overall level of security is not materially reduced.<\/span><\/p>\n



                                            <\/h6>\n

                                            ANNEX C<\/b>
                                            <\/b>SUBPROCESSORS<\/b><\/span><\/h2>\n

                                            The Controller acknowledges and agrees that the Processor may engage the following Subprocessors:<\/span><\/p>\n

                                            \u00a0<\/p>\n\n\n\n\n\n\n\n\n\n
                                            \n

                                            Subprocessor<\/b><\/span><\/p>\n<\/td>\n

                                            		\n

                                            Purpose<\/b><\/span><\/p>\n<\/td>\n<\/tr>\n

                                            \n

                                            DigitalOcean<\/span><\/p>\n<\/td>\n

                                            		\n

                                            Cloud infrastructure and hosting<\/span><\/p>\n<\/td>\n<\/tr>\n

                                            \n

                                            Stripe<\/span><\/p>\n<\/td>\n

                                            		\n

                                            Payment processing<\/span><\/p>\n<\/td>\n<\/tr>\n

                                            \n

                                            Google Workspace<\/span><\/p>\n<\/td>\n

                                            		\n

                                            Email and calendar services<\/span><\/p>\n<\/td>\n<\/tr>\n

                                            \n

                                            Google Maps Platform<\/span><\/p>\n<\/td>\n

                                            		\n

                                            Mapping, geolocation and routing services<\/span><\/p>\n<\/td>\n<\/tr>\n

                                            \n

                                            Firebase Cloud Messaging<\/span><\/p>\n<\/td>\n

                                            		\n

                                            Mobile push notifications<\/span><\/p>\n<\/td>\n<\/tr>\n

                                            \n

                                            Usertour<\/span><\/p>\n<\/td>\n

                                            		\n

                                            Product onboarding and user guidance<\/span><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                                            \u00a0<\/h2>\n

                                            CUSTOMER-CONNECTED SERVICES<\/b><\/span><\/h3>\n

                                            Third-party services independently selected, connected, configured or authorized by the Controller are not considered Subprocessors of the Processor.<\/span><\/p>\n

                                            \u00a0<\/p>\n

                                            Examples may include:<\/span><\/p>\n

                                            \u00a0<\/p>\n

                                              \n
                                            • \u25cf customer email providers;<\/span><\/li>\n
                                            • \u25cf customer SMTP services;<\/span><\/li>\n
                                            • \u25cf customer payment providers;<\/span><\/li>\n
                                            • \u25cf customer communication providers;<\/span><\/li>\n
                                            • \u25cf customer CRM systems;<\/span><\/li>\n
                                            • \u25cf customer integrations.<\/span><\/li>\n<\/ul>\n

                                              \u00a0<\/p>\n

                                              The Controller remains solely responsible for assessing and approving such services.<\/span><\/p>\n

                                              \u00a0<\/p>\n

                                              FUTURE SUBPROCESSORS<\/b><\/span><\/h3>\n

                                              The Processor may add, replace or remove Subprocessors where reasonably necessary for providing, maintaining, improving or securing the Services.<\/span><\/p>\n

                                              \u00a0<\/p>\n

                                              An updated list of Subprocessors shall be made available upon request.<\/span><\/p>\n

                                              \u00a0<\/p>\n

                                              The Controller agrees that such changes shall not require execution of a new Data Processing Agreement.<\/span><\/p>\n

                                              \u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

                                              \n\t\t\t
                                              \n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

                                              Version 1.0 \u00a0 This Data Processing Agreement (“DPA”) forms part of and supplements the Terms of Service, Subscription Agreement, Order Form or other agreement governing the use of CodiCo Dispatch Software (the “Main Agreement”) entered into between: \u00a0 BILTO GROUP LLC, a company incorporated in the United Arab Emirates, operating CodiCo Dispatch Software (“Processor”), \u00a0 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-27196","page","type-page","status-publish","hentry"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/codico.io\/es\/wp-json\/wp\/v2\/pages\/27196","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/codico.io\/es\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/codico.io\/es\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/codico.io\/es\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/codico.io\/es\/wp-json\/wp\/v2\/comments?post=27196"}],"version-history":[{"count":0,"href":"https:\/\/codico.io\/es\/wp-json\/wp\/v2\/pages\/27196\/revisions"}],"wp:attachment":[{"href":"https:\/\/codico.io\/es\/wp-json\/wp\/v2\/media?parent=27196"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}