Data Processing Agreement

1. Scope and roles This agreement applies when an organization uses RentRevo to process personal data relating to owners, tenants, users or other persons. The organization is the data controller and is responsible for the purposes and lawful basis of processing, informing data subjects, instructions to the processor and responding to requests concerning those data. Roms Sys Concept SRL, the operator of RentRevo (registered under no. J2011002498405, tax identification code RO28125357, registered office: Bdul Mihai Bravu 47-49, Sectorul 2, Bucuresti, Romania), acts as processor for that customer data. Contact: support@rentrevo.cloud; +4 0726 121 606. 2. Instructions and purpose RentRevo processes customer data only to provide, secure, support and maintain the service, on the documented instructions of the organization and as required by law. 3. Data and persons Data may include identity, contact, property, tenancy, payment-record, document and communication information concerning owners, tenants, prospective tenants, organization users and other persons entered by the organization. 4. Confidentiality and security Persons authorized to process customer data are subject to confidentiality. RentRevo applies appropriate technical and organizational measures designed to protect data against unauthorized access, loss, alteration or disclosure. 5. Subprocessors and transfers RentRevo may use service providers required to operate the service, subject to data-protection obligations. RentRevo remains responsible for processor obligations assigned to those providers and will use lawful safeguards for restricted international transfers. 6. Assistance and incidents The organization, as controller, assesses and responds to data-subject requests concerning data it entered, including tenant erasure requests. If RentRevo receives such a request directly and can reasonably identify the organization concerned, it will forward the request to that organization without undue delay and direct the requester to the controller. RentRevo will not independently decide the merits of the request or delete or disclose the organization's data solely on that request, without the organization's documented instructions or a legal obligation. Taking account of the nature of processing, RentRevo will reasonably assist the organization with its data-subject rights, security and regulatory obligations. RentRevo will notify the organization without undue delay after becoming aware of a personal-data breach affecting its customer data. 7. Return and deletion The organization may choose to export its data through the Account Admin function while access is available and is encouraged to keep a copy periodically. Grace 1 suspends excess seats without deleting organization data. If overage remains after the Grace 2 notices and deadline, RentRevo may irreversibly delete excess seats, properties and files, including data associated with removed properties, in accordance with the limits and deadlines documented in the Terms and displayed in the service. On organization closure, operational data is deleted under the notified process; RentRevo retains only records required by law. At the end of the service, the choice to return data through export or delete them is exercised through these processes, except where storage is legally required. These provisions do not remove RentRevo's processor obligations. 8. Contact Data-processing questions may be sent to support@rentrevo.cloud.