1. Purpose & Scope
This Data Processing Agreement ("DPA") supplements the commercial terms between Crosane Technologies and enterprise retail customers. It governs the processing of personal data in accordance with the European Union General Data Protection Regulation (GDPR) Regulation (EU) 2016/679.
2. Roles of the Parties
The Merchant acts as the Data Controller of shopper search events and catalog records. Crosane acts strictly as a Data Processor, processing data solely on documented instructions from the Merchant to optimize catalog retrieval and generate A/B test statistics.
3. Technical & Organizational Security Measures
Crosane maintains rigorous technical controls to protect Merchant telemetry:
- Strict tenant-level cryptographic isolation ensuring zero cross-tenant leakage.
- End-to-end encryption in transit (TLS 1.3) and at rest (AES-256).
- Ephemeral edge request caching (<5 ms edge latency) with automated log truncation.
4. Standard Contractual Clauses & Execution
Enterprise legal teams requesting a signed copy of our standardized DPA including EU Standard Contractual Clauses (SCCs) can request an executed agreement directly at legal@crosane.com.