Data Processing Addendum

This Data Processing Addendum ("DPA") forms part of the agreement between you ("Controller") and ParkDwell, Inc. ("Processor"). It governs ParkDwell's processing of personal data on your behalf.

Placeholder content — replace with a lawyer-reviewed DPA before launch. This is the typical scaffold for a GDPR Article 28 DPA.

1. Scope

ParkDwell processes the categories of personal data listed in Annex I (resident contact information, vehicle data, lease records, parking activity, payment metadata) for the duration of the underlying service agreement.

2. Subprocessors

Our current subprocessors are listed at /subprocessors. We'll provide 30 days' notice before adding any new subprocessor; you may object in writing.

3. International transfers

Where data is transferred outside the EEA, we rely on the EU Standard Contractual Clauses (2021/914) and applicable Data Transfer Impact Assessments.

4. Security measures

ParkDwell implements the technical and organizational measures described at /security, including encryption at rest and in transit, role-based access control, audit logging, and incident response.

5. Data subject requests

ParkDwell will assist Controller in responding to data subject access, correction, and erasure requests via the self-service tools in Settings → Privacy. Bulk export requests can be made to privacy@parkdwell.com.

6. Breach notification

We will notify Controller without undue delay (and within 72 hours where required) of any personal data breach affecting Controller's data.

7. Annex I — Data categories

• Resident contact info (name, phone, email)
• Vehicle plate + region
• Lease records (start/end dates, unit number)
• Parking activity (reservations, permits, gate events)
• Payment metadata (no card numbers stored)

Questions? Email legal@parkdwell.com.