Data Processing Addendum (DPA)

Last updated:10.03.2026

This Data Processing Addendum ("DPA") forms part of the TimeHive Terms and Conditions and applies where TimeHive processes personal data on behalf of customers.

1. Roles

The customer acts as the data controller and TimeHive acts as the data processor with respect to personal data processed through the Service.

2. Processing Instructions

TimeHive will process personal data only in accordance with documented instructions from the customer and for the purpose of providing the Service.

3. Security Measures

TimeHive will implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

4. Subprocessors

TimeHive may engage subprocessors such as cloud infrastructure providers. All subprocessors are required to maintain appropriate data protection safeguards.

5. Data Subject Rights

Where reasonably possible, TimeHive will assist the customer in responding to requests from data subjects exercising their rights under data protection law.

6. Data Breach Notification

TimeHive will notify customers without undue delay after becoming aware of a personal data breach affecting customer data.

7. Data Deletion

Upon termination of the Service, customer personal data will be deleted or returned according to customer instructions unless retention is required by law.