RESPONSIBLE DATA HANDLING

Agreement

Data Processing

SCROLL

Data Processing Agreement (DPA) – SEO Boost

1. Parties

•

This Data Processing Agreement (“Agreement”) is entered into between:

•

Controller: The client or organization using seoboost.co.id services.

•

Processor: PT. Algo Sea Biz (SEO Boost) Jl. Bypass Ngurah Rai No.67, Kuta, Bali 80361 Indonesia, providing SEO tools powered by Google Search and Google Analytics APIs.

2. Subject Matter

•

This Agreement governs the processing of personal data by SEO Boost in connection with the provision of SEO analytics, reporting, and optimization services.

3. Duration

•

The Agreement remains in effect for the duration of the client’s use of seoboost.co.id services and terminates upon account closure or contract end.

4. Nature & Purpose of Processing

•

Nature: Collection, storage, and analysis of search and analytics data.

•

Purpose: Deliver SEO insights, reporting, and optimization services to the Controller.

5. Types of Data Processed

•

Account information (e.g., name, email).

•

Usage data (e.g., queries, analytics reports).

•

Technical data (e.g., IP address, device info).

•

API data retrieved from Google services.

6. Obligations of SEO Boost (Processor)

•

Process personal data only on documented instructions from the Controller.

•

Ensure confidentiality and restrict access to authorized personnel.

•

Implement technical and organizational measures to protect data.

•

Notify the Controller promptly of any data breaches.

•

Assist the Controller in fulfilling obligations under applicable data protection laws.

7. Obligations of the Controller (Client)

•

Ensure lawful basis for data collection and processing.

•

Provide accurate and lawful instructions to seoboost.co.id..

•

Inform end‑users about data processing activities.

8. Sub‑Processors

•

seoboost.co.id may engage sub‑processors (e.g., hosting providers, Google APIs).

•

The Processor will maintain transparency and notify the Controller of sub‑processor changes.

9. International Data Transfers

•

Data may be processed in Indonesia, the United States, or other jurisdictions.

•

Transfers will comply with applicable laws and Google’s API policies.

10. Data Subject Rights

•

SEO Boost will assist the Controller in handling requests for access, correction, deletion, or consent withdrawal.

•

Regional rights apply depending on the user’s location (see Appendices).

11. Termination & Data Return

•

Upon termination, seoboost.co.id will delete or return personal data as instructed by the Controller.

12. Governing Law

•

This Agreement is governed by the laws of the Controller’s primary jurisdiction, unless otherwise agreed.

Regional Compliance Appendix

Appendix A: Indonesia

•

Compliance with UU ITE and PDP Law.

•

Rights: access, correction, deletion, withdrawal of consent, complaint to Indonesian authority.

•

Breach notification aligned with PDP Law.

•

Jurisdiction: Indonesian courts.