1. Overview

This Data Processing Agreement (“DPA”) defines how TFalke processes data on behalf of its customers.

In this context, the customer acts as the data controller, and TFalke operates as the data processor.

2. Scope of Processing

TFalke processes data strictly to provide and operate the platform. This includes:

• Device metadata and system state
• Execution commands and results
• Operational telemetry required for system functionality

Processing is limited to what is necessary for service delivery.

3. Purpose Limitation

Data is processed solely for:

• Execution and verification of commands
• Maintaining real-time system state
• Security monitoring and incident detection
• Platform reliability and performance

TFalke does not process data for advertising or unrelated purposes.

4. Data Protection Measures

TFalke implements technical and organizational measures to protect data:

• Encryption in transit and at rest
• Role-based access control (RBAC)
• Authentication and session management
• Audit logging of system activity

5. Subprocessors

TFalke may use trusted infrastructure providers to deliver the service.

These providers maintain industry-standard certifications such as ISO 27001 and SOC 2.

A list of subprocessors can be provided upon request.

6. Data Transfers

Data may be processed in multiple regions depending on infrastructure deployment.

TFalke ensures appropriate safeguards are in place to maintain data protection standards.

7. Data Subject Rights

TFalke supports customers in fulfilling data subject rights requests, including access, correction, and deletion of data.

8. Data Breach Notification

TFalke will notify customers without undue delay upon becoming aware of a data breach affecting customer data.

9. Data Retention & Deletion

Data is retained only as necessary for operational and auditing purposes.

Upon termination of service, data will be deleted or made inaccessible within a reasonable timeframe.

10. Customer Responsibilities

Customers are responsible for:

• Ensuring lawful use of the platform
• Managing access controls within their environment
• Complying with applicable data protection laws

11. Audit & Compliance

TFalke maintains internal security and operational controls aligned with industry standards.

Relevant documentation may be shared with customers upon request.

12. Updates

This agreement may be updated to reflect changes in the platform or regulatory requirements.

13. Contact

For DPA or data processing inquiries:

security@tfalke.com