Data Processing Agreement

Parties

This DPA is between your organization ("Customer", the data controller) and AertaOne ("Processor", the operator of Aerta Time), when Customer uses the Aerta Time subscription service.

Subject matter

Processor processes personal data on Customer's instructions to provide time & attendance software: account and membership data, clock in/out records, optional GPS coordinates when enabled, shift patterns, timesheets, and audit history. Processing locations and subprocessors are listed in our privacy policy.

Customer obligations

Customer is responsible for having a lawful basis to collect employee time data, informing staff that time (and optional location) is recorded, and using exports in compliance with applicable employment and privacy law. Customer instructs Processor only through normal use of the product and documented support channels.

Processor obligations

• Process personal data only on documented instructions from Customer.
• Ensure personnel with access are bound by confidentiality.
• Implement appropriate technical and organizational measures (see security overview in docs).
• Assist with data subject requests via Account → Data & privacy (human-in-the-loop).
• Notify Customer without undue delay after becoming aware of a personal data breach.
• Delete or return Customer data on termination, subject to audit-log retention described in Terms.

Subprocessors

Customer authorizes the subprocessors listed on the privacy policy page. Processor will notify Customer of material subprocessor changes via the privacy policy or email to organization owners.

International transfers

Primary application and database hosting use EU regions where available (Supabase EU, Vercel). Some subprocessors may process data in other regions under their standard DPA terms linked from the privacy policy.

Term

This DPA applies for the duration of the subscription and until Customer data is deleted or returned, except where audit logs must be retained as described in the terms of service.

Contact

DPA or security questions: support@aertatime.com or contact form.