Data Processing Agreement (DPA)

1. Parties and Purpose

This Data Processing Agreement ("DPA") is entered into between the Client (the "Controller") and Razuwanuscapital Pty Ltd, represented by Director Chloe Johnson, located at 142 Eagle Street, Brisbane QLD 4000 (the "Processor").

The purpose of this agreement is to ensure that the processing of personal data and intellectual property materials provided by the Controller for recording, mixing, and mastering services is conducted in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Scope of Processing

The Processor shall process data only on the documented instructions of the Controller. The categories of data include:

• Contact Data: Names, email addresses, and phone numbers for project coordination.
• Audio Materials: Raw recordings, stems, and master files provided by the client.
• Project Metadata: Session logs, track sheets, and technical specifications.

The data subjects are the musicians, voice artists, and representatives of the Controller.

3. Obligations of the Processor

The Processor agrees to:

• Process data solely for the delivery of services described in Terms and Conditions.
• Ensure that personnel authorised to process the data have committed themselves to confidentiality.
• Assist the Controller in responding to requests from individuals exercising their rights under the Privacy Act 1988 (Cth).

4. Sub-processors

The Processor engages the following sub-processors to ensure the technical delivery of services:

• Micron 21 Pty Ltd (Unit 2, 7 Eastspur Court, Kilsyth South VIC 3137): Provided for secure server hosting and data storage.
• FormSubmit (USA): Used for the transmission of initial booking enquiries. Data transfer to the USA is handled in accordance with APP 8.

5. Security and Incidents

The Processor implements appropriate technical and organisational measures to protect data against unauthorised or unlawful processing and accidental loss. In the event of a data breach, the Processor will notify the Controller without undue delay to allow for notification to the Office of the Australian Information Commissioner (OAIC).

6. Data Retention and Deletion

Following the completion of the project and full payment, the Processor will store session archives for a period of 12 months. After this period, data will be permanently deleted unless the Controller requests a transfer of archives.

Upon termination of the contract, the Processor shall, at the choice of the Controller, delete or return all personal data, subject to the requirements of the Privacy Policy.

7. Audit and Compliance

The Processor shall make available to the Controller all information necessary to demonstrate compliance with the obligations laid down in this DPA and allow for and contribute to audits conducted by the Controller or another auditor mandated by the Controller.

8. Jurisdiction and Law

This DPA is governed by the laws of Queensland, Australia. Any disputes arising from this agreement shall be subject to the exclusive jurisdiction of the courts in Brisbane.

For further enquiries, please contact:
Email: [email protected]
Phone: (07) 3937 3880