Bernt
6989a98d75
- Arkitektur: docs/auth/passwordless-architecture.md - Backend: iom/quixzoom-auth-service/ (FastAPI + Redis) - Webb: quixzoom-market-pages/se/login/ (QR-kod + polling) - App: iom/quixzoom-app/src/features/auth/ (push + deep links) Flöde: QR-kod → app-godkännande → webb-inloggad
115 lines
9.1 KiB
HTML
115 lines
9.1 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="UTF-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
|
<meta name="description" content="Landvex Data Processing Addendum — for enterprise customers where Landvex acts as data processor. Contact legal@landvex.com to execute.">
|
|
<title>Data Processing Addendum — Landvex</title>
|
|
<link rel="canonical" href="https://landvex.com/dpa/">
|
|
<link rel="icon" type="image/x-icon" href="/favicon.ico">
|
|
<link rel="icon" type="image/svg+xml" href="/favicon.svg">
|
|
<link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png">
|
|
<link rel="apple-touch-icon" href="/apple-touch-icon.png">
|
|
<meta name="robots" content="index, follow">
|
|
<link rel="stylesheet" href="/assets/css/landvex-complete.css">
|
|
<style>
|
|
*, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
|
|
body { font-family: -apple-system, BlinkMacSystemFont, "Helvetica Neue", sans-serif; background: #fff; color: #1d1d1f; line-height: 1.7; }
|
|
nav { height: 56px; border-bottom: 1px solid #e5e5e7; display: flex; align-items: center; justify-content: space-between; padding: 0 24px; position: sticky; top: 0; background: rgba(255,255,255,0.92); backdrop-filter: blur(12px); z-index: 100; }
|
|
.logo { font-size: 17px; font-weight: 700; color: #1d1d1f; text-decoration: none; letter-spacing: -0.3px; }
|
|
.logo span { color: #0066cc; }
|
|
.nav-back { font-size: 14px; color: #0066cc; text-decoration: none; }
|
|
.draft-banner { background: #fff3cd; border-bottom: 1px solid #ffc107; padding: 24px; font-size: 13px; color: #664d03; text-align: center; }
|
|
main { max-width: 760px; margin: 0 auto; padding: 24px 80px; }
|
|
h1 { font-size: clamp(24px, 4vw, 36px); font-weight: 700; letter-spacing: -0.5px; margin-bottom: 8px; }
|
|
.meta { font-size: 13px; color: #6e6e73; margin-bottom: 40px; }
|
|
h2 { font-size: 18px; font-weight: 600; margin: 36px 0 12px; color: #1d1d1f; }
|
|
p { margin-bottom: 14px; font-size: 15px; color: #3a3a3c; }
|
|
ul { margin: 0 0 14px 20px; font-size: 15px; color: #3a3a3c; }
|
|
ul li { margin-bottom: 6px; }
|
|
ol { margin: 0 0 14px 20px; font-size: 15px; color: #3a3a3c; }
|
|
ol li { margin-bottom: 8px; }
|
|
table { width: 100%; border-collapse: collapse; margin: 16px 0 24px; font-size: 13px; }
|
|
th { background: #f5f5f7; padding: 24px; text-align: left; font-weight: 600; border-bottom: 2px solid #e5e5e7; }
|
|
td { padding: 24px; border-bottom: 1px solid #1a1a1a; vertical-align: top; }
|
|
.highlight { background: #f5f5f7; border-radius: 10px; padding: 24px; margin: 20px 0; font-size: 14px; }
|
|
.highlight p { margin-bottom: 0; font-size: 14px; }
|
|
.info-box { background: #e8f4fd; border-left: 4px solid #0066cc; border-radius: 0 8px 8px 0; padding: 24px; margin: 20px 0; font-size: 14px; color: #1d1d1f; }
|
|
footer { border-top: 1px solid #e5e5e7; padding: 24px; text-align: center; font-size: 13px; color: #6e6e73; }
|
|
footer a { color: #0066cc; text-decoration: none; }
|
|
a { color: #0066cc; }
|
|
@media (max-width: 600px) { main { padding: 24px 60px; } table { font-size: 12px; } }
|
|
</style>
|
|
<style>
|
|
@media (max-width: 640px) {
|
|
.hero h1 { font-size: 2rem !important; }
|
|
.hero p { font-size: 1rem !important; }
|
|
.card { padding: 1.5rem !important; }
|
|
.grid { grid-template-columns: 1fr !important; }
|
|
.btn { padding: 0.75rem 1.5rem !important; font-size: 1rem !important; }
|
|
}
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<nav aria-label="breadcrumb" aria-label="Main navigation">
|
|
<a href="/" >Home</a> / <span>dpa</span>
|
|
</nav>
|
|
<nav aria-label="Main navigation">
|
|
<a href="/" class="logo">Land<span>vex</span></a>
|
|
<a href="/" class="nav-back">← Landvex</a>
|
|
</nav>
|
|
<div class="draft-banner">
|
|
<svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="#f59e0b" stroke-width="2"><path d="M10.29 3.86L1.82 18a2 2 0 0 0 1.71 3h16.94a2 2 0 0 0 1.71-3L13.71 3.86a2 2 0 0 0-3.42 0z"/><line x1="12" y1="9" x2="12" y2="13"/><line x1="12" y1="17" x2="12.01" y2="17"/></svg> <strong>Draft notice:</strong> This DPA is a working draft pending review by qualified data-protection counsel. Final version will be published before commercial launch (target: 1 August 2026).
|
|
</div>
|
|
<main>
|
|
<h1>Data Processing Addendum</h1>
|
|
<p class="meta">Last updated: 24 June 2026 · Version 0.1 (draft)</p>
|
|
|
|
<div class="info-box">
|
|
<strong>Note on role:</strong> This DPA applies when Landvex acts as a <em>data processor</em> for enterprise customers with bespoke processing missions. For standard Landvex intelligence products, Landvex acts as an independent data controller — please contact <a href="mailto:legal@landvex.com">legal@landvex.com</a> for controller-to-controller terms.
|
|
</div>
|
|
|
|
<p>This Data Processing Addendum ("<strong>DPA</strong>") supplements the main service agreement between the customer ("<strong>Controller</strong>") and <strong>Landvex AB</strong>, org.nr 559141-7042, Tyresö, Sweden ("<strong>Processor</strong>").</p>
|
|
|
|
<h2>1. Processing instructions</h2>
|
|
<p>Processor shall process personal data only on Controller's documented instructions, including with regard to transfers of personal data to a third country, unless required to do so by Union or Member State law; in such case, Processor shall inform Controller of that legal requirement before processing, unless the law prohibits this on grounds of public interest.</p>
|
|
|
|
<h2>2. Confidentiality</h2>
|
|
<p>Processor shall ensure that all personnel authorised to process personal data under this DPA are bound by appropriate confidentiality obligations (whether contractual or statutory) and have received appropriate data-protection training.</p>
|
|
|
|
<h2>3. Security</h2>
|
|
<p>Processor shall implement and maintain appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 GDPR. A description of current measures is published at <a href="/security/">landvex.com/security/</a>.</p>
|
|
|
|
<h2>4. Sub-processors</h2>
|
|
<p>Processor's current sub-processors are listed at <a href="/subprocessors/">landvex.com/subprocessors/</a>. Controller grants general written authorisation to engage the listed sub-processors. Processor will give Controller at least <strong>30 days' prior notice</strong> of any intended changes to the list. Controller may object to a new sub-processor within the notice period by contacting <a href="mailto:legal@landvex.com">legal@landvex.com</a>.</p>
|
|
|
|
<h2>5. Data-subject requests</h2>
|
|
<p>Processor shall assist Controller in responding to requests from data subjects exercising their rights under applicable data protection law. Processor will notify Controller of any such request received within <strong>5 business days</strong> of receipt and will not respond directly to data subjects unless authorised to do so by Controller.</p>
|
|
|
|
<h2>6. Breach notification</h2>
|
|
<p>Processor shall notify Controller of any personal data breach <strong>without undue delay</strong> and in any event within <strong>24 hours</strong> of Processor becoming aware of it. Notification will include, to the extent available: the nature of the breach; categories and approximate number of data subjects and records concerned; likely consequences; and measures taken or proposed to address the breach.</p>
|
|
|
|
<h2>7. Deletion and return</h2>
|
|
<p>Upon termination or expiry of the service agreement, Processor shall, at Controller's choice, delete or return all personal data to Controller, and delete existing copies, within <strong>30 days</strong>. Processor shall provide a written certification of deletion upon request. This obligation does not apply to the extent Processor is required by Union or Member State law to retain the personal data.</p>
|
|
|
|
<h2>8. Audit rights</h2>
|
|
<p>Processor shall make available all information reasonably necessary to demonstrate compliance with this DPA and, at Controller's reasonable request and cost, contribute to audits or inspections. Audits are limited to once per calendar year except where required by a supervisory authority or following a confirmed personal data breach. Controller shall provide reasonable prior notice.</p>
|
|
|
|
<h2>9. International transfers</h2>
|
|
<p>Any transfer of personal data outside the EEA will be made subject to appropriate safeguards, including EU Standard Contractual Clauses (Modules 2 and/or 3 as applicable) and supplementary technical and organisational measures, unless an adequacy decision applies.</p>
|
|
|
|
<h2>10. Execute this DPA</h2>
|
|
<div class="highlight">
|
|
<p>To discuss, negotiate, or execute this DPA for your organisation, contact: <a href="mailto:legal@landvex.com">legal@landvex.com</a></p>
|
|
</div>
|
|
|
|
<h2>Contact</h2>
|
|
<p><strong>Landvex AB</strong> · org.nr 559141-7042 · Tyresö, Sweden<br>
|
|
<a href="mailto:legal@landvex.com">legal@landvex.com</a> · <a href="mailto:privacy@landvex.com">privacy@landvex.com</a></p>
|
|
</main>
|
|
<footer class="lv-footer" role="contentinfo">
|
|
<p>© 2026 Landvex AB · org.nr 559141-7042 · Tyresö, Sweden · <a href="/privacy/">Privacy</a> · <a href="/terms/">Terms</a> · <a href="/subprocessors/">Sub-processors</a> · <a href="/dpa/">DPA</a></p>
|
|
</footer>
|
|
</body>
|
|
</html>
|