Data Processing Addendum
This Data Processing Addendum ("DPA") forms part of the agreement between Blitz Learning Technologies Pvt. Ltd. ("Processor") and the Customer ("Controller") where Blitz Learning processes personal data on behalf of the Customer.
Scope
This DPA applies whenever Blitz Learning processes personal data while delivering:
- LMS services
- LXP services
- SaaS platforms
- AI-powered learning systems
- Custom eLearning development
- Managed learning services
Roles
- Customer — Data Controller
- Blitz Learning Technologies Pvt. Ltd. — Data Processor
Processing Activities
Processing may include:
- Collection
- Storage
- Organization
- Retrieval
- Analysis
- Transmission
- Backup
- Deletion
solely for providing contracted services.
Customer Instructions
Blitz Learning processes personal data only in accordance with documented customer instructions unless otherwise required by law.
Confidentiality
Personnel authorized to process personal data are subject to appropriate confidentiality obligations.
Security Measures
Appropriate safeguards may include:
- Encryption
- Access control
- Authentication
- Audit logging
- Backup
- Disaster recovery
- Security monitoring
Sub-processors
Blitz Learning may engage trusted sub-processors (such as cloud infrastructure providers or communication service providers) to support service delivery. We remain responsible for ensuring such providers are contractually obligated to implement appropriate data protection measures.
A current list of significant sub-processors can be made available to customers upon request or published separately.
Data Subject Requests
Where appropriate, Blitz Learning will reasonably assist customers in responding to requests relating to:
- Access
- Rectification
- Erasure
- Restriction
- Portability
- Objection
Security Incidents
Blitz Learning will notify affected customers without undue delay after becoming aware of a confirmed personal data breach affecting customer data, as required by applicable law and contractual obligations.
Data Retention and Deletion
Upon termination of services, personal data will be returned or securely deleted in accordance with the applicable agreement, customer instructions, and legal retention requirements.
Audit
Where contractually agreed, Blitz Learning will provide reasonable information demonstrating compliance with this DPA, subject to confidentiality and security obligations.
Governing Law
Unless otherwise agreed in writing, this DPA shall be governed by the laws applicable to the primary services agreement between the parties.