DATA PROCESSING AGREEMENT

DATA PROCESSING AGREEMENT

Effective Upon First Use

This Data Processing Agreement (“DPA”) forms part of and is incorporated by reference into the Terms of Service between iStunt.com, Inc and iStunt, Inc, Nevada corporations collectively referred to as iStunt, and the user, customer, subscriber, or visitor (“you”).

This DPA applies only to the extent that applicable data protection laws require a data processing agreement.

In the event of a conflict, the Terms of Service shall control.


I. Definitions


II. Scope and Applicability

This DPA applies only where:

In most cases, iStunt acts as an independent Controller with respect to user submitted and directory data.


III. Roles of the Parties

A. iStunt as Controller

For platform operations, directory functionality, communications, security, billing, analytics, and compliance, iStunt acts as an independent Controller and determines the purposes and means of processing.

B. iStunt as Processor (Limited Circumstances)

Where iStunt processes Personal Data strictly on documented instructions of a Customer, iStunt acts as a Processor solely for that limited purpose.


IV. Processing Details

Where applicable, processing shall be limited to:

Processing duration corresponds to the term of Services and applicable retention requirements.


V. Customer Obligations

You represent and warrant that:

You are solely responsible for the legality of Personal Data submitted to the Platform.


VI. Confidentiality

iStunt ensures that personnel authorized to process Personal Data are bound by confidentiality obligations consistent with this DPA.


VII. Security Measures

iStunt implements reasonable administrative, technical, and physical safeguards designed to protect Personal Data. Specific security measures are determined by iStunt and may evolve over time.


VIII. Subprocessors

iStunt may engage subprocessors to support platform operations, including hosting, analytics, communications, and payment processing.

You authorize the use of subprocessors subject to confidentiality and security obligations.


IX. Data Subject Requests

Where iStunt acts as a Processor, iStunt will reasonably assist with data subject requests to the extent required by law, provided such requests are lawful and technically feasible.

Requests relating to data controlled by iStunt as Controller must be directed to iStunt directly.


X. Data Breach Notification

iStunt will notify Customers of a confirmed Personal Data breach involving data processed on their behalf where required by applicable law.

Notification timelines depend on the nature of the breach and legal requirements.


XI. International Transfers

Personal Data may be processed and stored in the United States and other jurisdictions where iStunt or its service providers operate.

You consent to such transfers, subject to applicable law.


XII. Return or Deletion of Data

Upon termination of Services, Personal Data processed under this DPA may be deleted, anonymized, or retained in accordance with the Data Retention Policy and applicable law.


XIII. Audits

To the extent required by law, iStunt will make available information reasonably necessary to demonstrate compliance with this DPA.

Audit rights are limited to what is legally required and must not compromise security or confidentiality.


XIV. Liability and Indemnification

Liability arising from this DPA is governed by and subject to the limitations set forth in the Terms of Service.

You agree to indemnify iStunt for claims arising from unlawful data provided or instructions given by you.


XV. Governing Law

This DPA is governed by the laws of the State of Nevada, without regard to conflict of law principles.


XVI. Entire Agreement

This DPA, together with the Terms of Service, constitutes the entire agreement regarding data processing and supersedes prior agreements on this subject.


XVII. Contact Information

iStunt.com, Inc
840 S Rancho Rd 4 327
Las Vegas Nevada 89106
Email info@istunt.com