Last updated: May 28, 2026
This Data Processing Agreement ("DPA") governs how GangFX processes personal data on behalf of business customers ("Controllers") in connection with the services provided under our Terms of Service. This DPA is intended to ensure compliance with applicable data protection laws, including GDPR.
GangFX will process personal data only on documented instructions from the Controller and only as necessary to provide the services described in our Terms of Service.
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or destruction, including encryption, access controls, and regular security assessments.
We may engage sub-processors (e.g., cloud infrastructure providers, payment processors) to assist in delivering our services. All sub-processors are bound by equivalent data protection obligations. A current list of sub-processors is available upon request.
We will assist Controllers in responding to data subject requests (access, rectification, deletion, portability) to the extent technically feasible and required by applicable law.
In the event of a personal data breach, we will notify the relevant Controller without undue delay after becoming aware of the breach, providing sufficient information to fulfill any reporting obligations.
Personal data may be transferred to and processed in countries outside the EEA. In such cases, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).
For DPA inquiries or to request a signed DPA, contact us at gangfxdtf@gmail.com.