Agreement

Data Processing

SCROLL

Data Processing Agreement (DPA) – SEO Boost

1. Parties

This Data Processing Agreement (“Agreement”) is entered into between:

Controller: The client or organization using seoboost.co.id services.

Processor: PT. Algo Sea Biz (SEO Boost) Jl. Bypass Ngurah Rai No.67, Kuta, Bali 80361 Indonesia, providing SEO tools powered by Google Search and Google Analytics APIs.

2. Subject Matter

This Agreement governs the processing of personal data by SEO Boost in connection with the provision of SEO analytics, reporting, and optimization services.

3. Duration

The Agreement remains in effect for the duration of the client’s use of seoboost.co.id services and terminates upon account closure or contract end.

4. Nature & Purpose of Processing

Nature: Collection, storage, and analysis of search and analytics data.

Purpose: Deliver SEO insights, reporting, and optimization services to the Controller.

5. Types of Data Processed

Account information (e.g., name, email).

Usage data (e.g., queries, analytics reports).

Technical data (e.g., IP address, device info).

API data retrieved from Google services.

6. Obligations of SEO Boost (Processor)

Process personal data only on documented instructions from the Controller.

Ensure confidentiality and restrict access to authorized personnel.

Implement technical and organizational measures to protect data.

Notify the Controller promptly of any data breaches.

Assist the Controller in fulfilling obligations under applicable data protection laws.

7. Obligations of the Controller (Client)

Ensure lawful basis for data collection and processing.

Provide accurate and lawful instructions to seoboost.co.id..

Inform end‑users about data processing activities.

8. Sub‑Processors

seoboost.co.id may engage sub‑processors (e.g., hosting providers, Google APIs).

The Processor will maintain transparency and notify the Controller of sub‑processor changes.

9. International Data Transfers

Data may be processed in Indonesia, the United States, or other jurisdictions.

Transfers will comply with applicable laws and Google’s API policies.

10. Data Subject Rights

SEO Boost will assist the Controller in handling requests for access, correction, deletion, or consent withdrawal.

Regional rights apply depending on the user’s location (see Appendices).

11. Termination & Data Return

Upon termination, seoboost.co.id will delete or return personal data as instructed by the Controller.

12. Governing Law

This Agreement is governed by the laws of the Controller’s primary jurisdiction, unless otherwise agreed.

Regional Compliance Appendix

Appendix A: Indonesia

Compliance with UU ITE and PDP Law.

Rights: access, correction, deletion, withdrawal of consent, complaint to Indonesian authority.

Breach notification aligned with PDP Law.

Jurisdiction: Indonesian courts.