CAMCESS GDPR Compliance & Global Data Processing Addendum

CAMCESS Global DPA covering GDPR, UK GDPR, DPDP Act, CCPA, and other privacy laws. Effective Date: 1 July 2026.

GDPR Compliance & Global DPA

This Global Data Processing Addendum ("DPA") forms part of the Terms of Service between CAMCESS (Processor) and Customer (Controller). It governs processing of Personal Data by CAMCESS on behalf of Customer.

Roles

• Customer as Controller: Determines purposes, categories of data, lawful basis, and retention
• CAMCESS as Processor: Processes data only to provide Services, per Customer's instructions
• CAMCESS as Independent Controller: For account admin, billing, fraud prevention, security

Processing Details

• Personal Data categories: Name, email, phone, job title, account/customer info, CRM data, health scores, product usage, engagement, billing, authentication, audit logs
• Data Subjects: Employees, customers, prospects, users, stakeholders, partners, contractors

Security Measures

• Access controls, authentication, role-based access, encryption in transit and at rest
• Logging, monitoring, vulnerability management, incident response
• Secure development practices, business continuity

Security Incidents

CAMCESS will investigate, contain, remediate, and notify Customer without undue delay of Security Incidents affecting Customer Personal Data.

Subprocessors

CAMCESS uses categories including cloud infrastructure, database, authentication, email, analytics, CRM, billing, AI, monitoring, and security providers. Customer may object to new subprocessors where required by law.

International Transfers

• EEA: EU Standard Contractual Clauses (Decision 2021/914)
• UK: UK IDTA or UK Addendum to EU SCCs
• India: DPDP Act 2023 compliance
• US: Service provider/processor obligations under applicable state privacy laws

AI Processing

• Customer-controlled; CAMCESS processes through AI only as necessary to provide features
• No training of public third-party AI models with identifiable customer data without authorization
• AI outputs may be inaccurate; Customer responsible for review

Data Subject Rights

Customer is responsible for responding to requests. CAMCESS provides reasonable assistance and tools where technically feasible.

Data Retention & Deletion

Data retained for duration of Agreement. After termination, Customer may export data, then CAMCESS deletes or anonymizes per applicable retention period.

Technical and Organizational Measures

Access control, infrastructure security, data protection (encryption), application security, personnel security, incident management, and business continuity measures.

Third-Party Services

Where integrations involve Google or Microsoft services, CAMCESS complies with the Google API Services User Data Policy and Microsoft Data Protection Addendum respectively.

Contact

Intellica Camcess Software Solutions Private Limited
Email: [email protected]
Address: Flat No. 102, 11-6-825/7, First floor, Mount Ilyas Apartment, Red Hills, Urdu Medium Nampally, Hyderabad, Telangana, 500004

View Full DPA