Data Processing Agreement (DPA)
Last Updated: April 2026
This Data Processing Agreement (“Agreement”) forms part of the terms between FatFunnel Media Pvt. Ltd. (“Processor”, “we”, “our”, or “us”) and its clients (“Controller” or “Client”) who engage our services.
This Agreement governs the processing of personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).
1. Roles and Responsibilities
For the purposes of this Agreement:
- The Client acts as the Data Controller
- FatFunnel Media Pvt. Ltd. acts as the Data Processor
The Controller determines the purposes and means of processing personal data, while the Processor processes personal data on behalf of the Controller.
2. Scope of Processing
The Processor will process personal data only as necessary to provide agreed services, including B2B lead generation, outreach campaigns, and related marketing services.
The types of personal data may include:
- Names
- Business email addresses
- Job titles
- Company information
- Other business-related contact details
3. Purpose of Processing
Personal data will be processed solely for the purpose of:
- Executing outreach and lead generation campaigns
- Managing and optimizing marketing activities
- Providing agreed services to the Client
4. Processor Obligations
The Processor agrees to:
- Process personal data only on documented instructions from the Controller
- Ensure that persons authorized to process personal data are bound by confidentiality obligations
- Implement appropriate technical and organizational security measures
- Assist the Controller in fulfilling data subject rights requests where applicable
- Notify the Controller without undue delay in case of a personal data breach
5. Sub-processors
The Processor may engage third-party sub-processors (such as CRM platforms, email tools, and analytics providers) to deliver services.
The Processor ensures that such sub-processors are subject to appropriate data protection obligations.
6. International Data Transfers
Personal data may be transferred and processed outside the European Economic Area (EEA). The Processor will ensure that appropriate safeguards are in place, such as standard contractual clauses or equivalent mechanisms.
7. Data Security
The Processor shall implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or disclosure.
8. Data Retention and Deletion
The Processor will retain personal data only for as long as necessary to provide the services or as required by applicable law.
Upon termination of services, the Processor will, upon request, delete or return personal data unless retention is required by law.
9. Data Subject Rights
The Processor will assist the Controller in responding to requests from data subjects, including requests for access, rectification, deletion, or restriction of processing.
10. Audit Rights
The Controller may request reasonable information to demonstrate compliance with this Agreement, subject to confidentiality and reasonable notice.
11. Liability
Each party shall be responsible for its own compliance with applicable data protection laws. Liability shall be subject to the limitations outlined in the applicable service agreement or Terms and Conditions.
12. Governing Law
This Agreement shall be governed by the laws of India, unless otherwise agreed in writing.
13. Contact Information
FatFunnel Media Pvt. Ltd.
Office Number 306, Parmar Gallery, Wanwadi, Pune 411040, India
Email: privacy@fatfunnelmedia.com