Legal & Compliance
Data Processing Addendum
Effective Date: June 12, 2026
This Data Processing Addendum ("DPA") applies to business (B2B) customers of the Baalvion Mining platform (the "Platform") operated by Baalvion Industries Private Limited (the "Company"). It forms part of the agreement between you (the "Customer") and the Company and governs the processing of personal data carried out on the Customer's behalf. It should be read with our Privacy Policy.
1. Roles of the Parties
Where the Company processes personal data on the Customer's instructions to provide the Platform, the Customer acts as the controller (data fiduciary) and the Company acts as the processor (data processor). Each party shall comply with its respective obligations under applicable data-protection law, including the Digital Personal Data Protection Act, 2023.
2. Scope & Purpose of Processing
The Company processes personal data only as necessary to provide the Platform and as instructed by the Customer under the agreement. The subject matter, duration, nature, and purpose of processing, the types of personal data, and the categories of data subjects are as set out in the agreement and this DPA.
3. Sub-Processing
The Customer authorises the Company to engage sub-processors to support the provision of the Platform. The Company will impose data-protection obligations on sub-processors that are no less protective than those in this DPA and remains responsible for their performance. A current list of sub-processor categories is available upon request.
4. Security
The Company implements appropriate technical and organisational measures designed to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, or damage, including encryption in transit and at rest, access controls, and monitoring.
5. Data-Subject Requests
Taking into account the nature of the processing, the Company will provide reasonable assistance to the Customer in responding to requests from data subjects (or principals) to exercise their rights. Where the Company receives such a request directly, it will, where appropriate, direct the individual to the Customer.
6. Breach Notification
The Company will notify the Customer without undue delay after becoming aware of a personal-data breach affecting the Customer's data and will provide reasonable information to assist the Customer in meeting its notification obligations under applicable law.
7. Audit
The Company will make available information reasonably necessary to demonstrate compliance with this DPA and will allow for and contribute to audits, subject to reasonable confidentiality, security, and scheduling safeguards.
8. International Transfers
Where personal data is transferred or processed outside India, the Company will implement appropriate safeguards consistent with applicable data-protection law and will not transfer data to jurisdictions restricted by the Government of India.
9. Term & Deletion
This DPA remains in effect for the duration of the processing under the agreement. Upon termination or expiry, the Company will, at the Customer's choice, delete or return the personal data, except where retention is required by applicable law.
10. Full Executable DPA
This page summarises the data-processing terms that form part of the Customer agreement. A full, executable DPA is available upon request by contacting trade@baalvion.com.
This document is provided for transparency and does not constitute legal advice. Baalvion Mining Inc. is a brand operated by Baalvion Industries Private Limited, incorporated in India under CIN U43121OD2025PTC048479.