This Data Processing Addendum (“DPA”) applies where Averis Systems Ltd processes Personal Data on behalf of a Partner or Client (“Controller”) under a service agreement.
1. Roles & Scope
Controller: The Partner or Client determining the purpose of data processing
Processor: Averis Systems Ltd, processing data only on documented instructions
This DPA applies to all Personal Data processed in connection with Averis systems and services.
2. Nature of Processing
Averis Systems may process data related to:
Operational monitoring
Environmental and agricultural sensing
System usage and performance analytics
User and organizational account management
No sensitive personal data is processed unless expressly agreed in writing.
3. Compliance with Data Protection Laws
Averis Systems complies with:
EU General Data Protection Regulation (GDPR)
Kenya Data Protection Act
Applicable international data protection frameworks
4. Processor Obligations
Averis Systems shall:
Process data only on documented instructions
Implement appropriate technical and organizational safeguards
Ensure confidentiality obligations for personnel
Assist Controllers with data subject requests where applicable
Notify Controllers of data breaches without undue delay
5. Sub-Processors
Averis Systems may engage sub-processors for hosting, analytics, or infrastructure services. All sub-processors are subject to equivalent data protection obligations.
A current list of sub-processors may be provided upon request.
6. Data Transfers
Where Personal Data is transferred across borders, appropriate safeguards are applied, including contractual protections and secure infrastructure.
7. Data Retention & Deletion
Upon termination of services, Personal Data will be:
Returned to the Controller, or
Securely deleted, unless retention is legally required
8. Audits & Compliance
Upon reasonable request, Averis Systems will provide information necessary to demonstrate compliance with this DPA.
9. Liability
Liability related to data protection is subject to the limitations defined in the governing service agreement.
10. Governing Law
This DPA is governed by the laws of Kenya, unless otherwise agreed in writing.
Contact for Data Protection Matters
Email: contact@averissystems.com
Phone: +254 795 581 750