1. Parties
This Data Processing Agreement (“Agreement”) is entered into between:
- Kukhanya Energy Services (Pty) Ltd (“Processor”), and
- Any customer, partner, or entity making use of our services (“Controller”).
2. Purpose
The Processor shall process personal information on behalf of the Controller in compliance with POPIA.
3. Obligations of Processor
- Process personal information only on documented instructions of the Controller.
- Implement appropriate technical and organizational safeguards.
- Ensure confidentiality by binding employees and sub-processors.
- Assist the Controller with fulfilling POPIA data subject requests.
4. Sub-Processing
The Processor may engage third-party providers only under written agreement and with equal data protection obligations.
5. Data Breach Notification
The Processor shall notify the Controller without undue delay upon becoming aware of a personal data breach.
6. Termination
Upon termination of services, all personal information shall be securely returned or deleted, unless retention is required by law.