OpsLinkCAD – Data Processing Addendum (DPA)

Effective Date: January 1, 2025

Last Updated: January 1, 2025

This Data Processing Addendum (“DPA”) forms part of the OpsLinkCAD Terms of Service and governs the processing of personal data by OpsLinkCAD (“the Service”), a system owned and operated by OpsLink Systems.

This DPA is designed to comply with global privacy regulations, including:

• EU General Data Protection Regulation (GDPR)
• UK GDPR
• Canadian PIPEDA
• US State Privacy Laws (CCPA/CPRA, etc.)
• Any applicable international data protection standards

---

1. Definitions

• “Controller” – You, the user or organization using OpsLinkCAD.
• “Processor” – OpsLink Systems, operating OpsLinkCAD.
• “Data Subject” – Any individual whose personal data is processed.
• “Personal Data” – Any information relating to an identifiable person.
• “Processing” – Any operation performed on personal data.

---

2. Roles & Responsibilities

2.1 The Controller

You determine:

• What data is entered into OpsLinkCAD
• How long your data is retained
• What information is collected from members of your community

2.2 The Processor (OpsLink Systems)

We process data solely to provide OpsLinkCAD services.

We do not:

• Sell data
• Share data for advertising
• Process data for unrelated purposes

---

3. Data We Process On Your Behalf

When you use OpsLinkCAD, you may process personal data belonging to your members, such as:

• Names / identifiers
• Unit IDs, departments, call data
• Community/staff records
• Operational CAD/MDT data
• Notes and logs you enter

OpsLink Systems processes this data strictly under your instruction.

---

4. Security Measures (GDPR Article 32)

OpsLink Systems implements appropriate technical and organizational security measures, including:

• Encrypted passwords
• Secure servers and hardened infrastructure
• Access controls
• Least-permission internal access policies
• Regular monitoring for security breaches
• Data isolation between communities

---

5. Subprocessors

OpsLink Systems uses the following subprocessors:

• Stripe – Billing and subscription management
• Hosting provider(s) – Cloud infrastructure for running OpsLinkCAD

All subprocessors are bound by the same data protection obligations.

---

6. International Transfers

Your data may be processed or stored in countries outside your jurisdiction. By using OpsLinkCAD, you consent to these transfers.

---

7. Data Breach Notification (GDPR Article 33)

If OpsLink Systems becomes aware of a confirmed personal data breach, we will notify all affected Controllers as soon as reasonably possible.

---

8. Data Subject Rights

OpsLink Systems will assist you in fulfilling requests from your members, including:

• Access
• Correction
• Deletion
• Export/Portability

You are responsible for responding to Data Subject requests.

---

9. Data Retention & Deletion

OpsLink Systems retains your operational data only for as long as your account or community exists.

Upon deletion of an account, OpsLinkCAD will:

• Erase operational data
• Remove personal identifiable information
• Retain necessary logs required by law (if applicable)

---

10. Audit Rights

OpsLink Systems may provide documentation necessary to demonstrate compliance with this DPA.

---

11. Contact & Requests

For all privacy, data, and DPA-related inquiries, you must join the official OpsLinkCAD Discord:

Join here

This is the exclusive method of contacting OpsLink Systems for data protection matters.

---

12. Amendments

OpsLink Systems may modify this DPA at any time. Updated versions are effective immediately upon posting.