Purpose & Definitions
This Data Processing Agreement (DPA) governs the processing of personal data carried out by Nyverra Tecnologia LTDA (CNPJ 61.571.209/0001-08) as a data processor, on behalf and under the instructions of the customer (controller), within the scope of contracted services.
Terms used herein follow the definitions of the Brazilian General Data Protection Law (Law 13,709/2018 — LGPD).
Purpose & Scope
Nyverra shall process personal data exclusively for the execution of contracted services, in accordance with purposes documented in the commercial proposal and applicable statement of work.
Processing is limited to data strictly necessary for the operation, monitoring, support, and backup of managed environments.
Nyverra Obligations (Processor)
Subprocessors
The controller authorizes Nyverra to use the subprocessors listed in the Subprocessor Addendum. Nyverra will provide prior notice of any addition or replacement.
Data Subject Rights
Nyverra shall assist the controller in responding to data subject requests (access, rectification, erasure, portability), within the scope and timelines contractually agreed.
Term & Termination
This DPA remains in effect as long as personal data is processed under the contracted services. Upon termination, Nyverra shall delete or return the data as instructed by the controller, within 60 days.
General Provisions
This is a reference template. The DPA applicable to each contract shall be formalized as an appendix to the service agreement and may include additional clauses per the controller's sector-specific requirements.