Data Processing Agreement

The Client acts as Data Controller. Tissquad acts as Data Processor for the personal data of the Client's end customers (shipment recipients).

Data processed includes: recipient's first and last name, delivery address, phone number, email, order details, cash-on-delivery amount.

Data is processed exclusively for: order fulfillment, shipping, delivery, cash-on-delivery management, returns management, and order-related communications.

Among the measures in place, data in transit is encrypted with TLS and access to the systems is limited to authorized persons.

To provide the service, Tissquad engages other processors, namely the providers of the warehouse software, the shipping platform and the cloud servers, and a group company for email and documents, and it hands the parcels over to the carriers. The categories, with what each provider does and where it is based, are on the Sub-Processors page.

Some providers, including the one for email and documents, may also process the data outside the European Union, with the safeguards the GDPR provides for transfers. For shipments outside the European Union, the recipient's name, address and contact details reach the carrier and its network in the country of destination, because the parcel cannot be delivered without them.

The processing lasts as long as the service contract. What happens to the personal data at the end of the service is governed by the contract and by Article 28 GDPR.

For questions about data processing: legal@tissquad.com