Data Processing Agreement
Last updated: March 2026
This Data Processing Agreement ("DPA") forms part of the REZVA Terms of Use and governs the relationship between:
Data Processor: Darvodelec BG Ltd., VAT: BG205097336, Varna 9000, Ana Felixova 1A Str., Bulgaria. Email: [email protected]
Data Controller: The Specialist — the individual or entity registered on the REZVA platform who uses REZVA's services to manage their client data.
1. Subject Matter and Purpose
REZVA processes personal data of the Specialist's clients solely for the purpose of providing booking management, CRM, messaging, and related platform features, in accordance with the Specialist's instructions.
2. Types of Data Processed
REZVA processes the following categories of personal data belonging to the Specialist's clients:
- Names, email address, phone number
- Booking history, preferences, notes
- Allergies and health notes (if entered by the Specialist)
- Date of birth (if entered)
- Contact information provided at the time of booking
3. REZVA's Obligations as Processor
REZVA commits to:
- Process personal data only on documented instructions from the Specialist
- Ensure that staff and sub-processors with access to data are bound by confidentiality obligations
- Implement appropriate technical and organisational security measures (encryption, access controls, regular backups)
- Assist the Specialist in fulfilling data subject rights requests (access, rectification, erasure, portability)
- Notify the Specialist without undue delay upon discovering a personal data breach
- Delete or return all personal data upon account termination (at Specialist's choice)
- Provide all information necessary to demonstrate compliance with GDPR
4. Sub-processors
REZVA uses the following sub-processors:
| Sub-processor | Purpose | Location |
|---|---|---|
| Hetzner Online | Server and database hosting | EU (Germany) |
| Stripe Inc. | Payment processing (subscriptions) | USA (SCCs) |
| Twilio Inc. | SMS notifications | USA (SCCs) |
| Brevo (Sendinblue) | Email delivery | EU (France) |
| Google LLC | Analytics (GA4), Google Sign-In | USA (SCCs) |
For transfers to the USA, Standard Contractual Clauses (SCCs) under GDPR apply.
5. Data Subject Rights
The Specialist is responsible for responding to requests from clients regarding their rights (access, rectification, erasure, portability). REZVA provides the tools to fulfil these requests. For assistance: [email protected]
6. Duration and Termination
This DPA remains in effect for the duration of the Specialist's account on REZVA. Upon termination, the Specialist may download their data before permanent deletion. REZVA deletes data within 30 days of termination, unless applicable law requires longer retention.
7. Contact
For data processing enquiries: [email protected]
Darvodelec BG Ltd., Varna 9000, Ana Felixova 1A Str., Bulgaria