Prossimamente Ricevi notifiche
Funzionalità Prezzi Riferimento API Informazioni
Accedi Prossimamente

Accordo sul trattamento dei dati (DPA)

v1.0 -- Valido da marzo 2026

Morlivo, a brand of Stelica Ventures LLC, a Texas limited liability company ("Morlivo", "Processor"), is committed to processing personal data in compliance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the UK GDPR, and all other applicable data protection laws. This Data Processing Agreement ("DPA") governs the processing of personal data by Morlivo on behalf of our customers ("Controller"). References to "Morlivo" or "Morlivo.ai" refer to Stelica Ventures LLC doing business as Morlivo.ai.

1. Definizioni

Ai fini del presente Accordo sul trattamento dei dati:

  • "Personal Data" means any information relating to an identified or identifiable natural person, as defined in Article 4(1) of the GDPR.
  • "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion, as defined in Article 4(2) of the GDPR.
  • "Controller" means the customer who determines the purposes and means of Processing Personal Data.
  • "Processor" means Morlivo, which processes Personal Data on behalf of the Controller.
  • "Sub-processor" means any third party engaged by the Processor to process Personal Data on behalf of the Controller.
  • "Data Subject" means an identified or identifiable natural person whose Personal Data is processed.

2. Dettagli del trattamento

The Processor shall process Personal Data only on documented instructions from the Controller, including with regard to transfers of Personal Data to a third country, unless required to do so by Union or Member State law to which the Processor is subject.

I dettagli del trattamento sono i seguenti:

  • Subject matter: Provision of translation, transcription, and language processing services.
  • Duration: For the term of the underlying service agreement.
  • Nature and purpose: Processing Customer Content to deliver translations, transcriptions, and related language services.
  • Categories of data subjects: End users and individuals whose data is contained within Customer Content.
  • Types of personal data: Names, contact information, and any other personal data contained in materials submitted for processing.

3. Misure di sicurezza

The Processor shall implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 of the GDPR. These measures include:

  • Crittografia dei Dati Personali a riposo (AES-256) e in transito (TLS 1.2+).
  • Capacità di garantire la riservatezza, l'integrità, la disponibilità e la resilienza continuative dei sistemi e dei servizi di elaborazione.
  • Capacità di ripristinare disponibilità e accesso ai dati personali in modo tempestivo in caso di incidente fisico o tecnico.
  • Test regolari, valutazioni e analisi dell'efficacia delle misure tecniche e organizzative.
  • Pseudonimizzazione dei dati personali quando tecnicamente fattibile e appropriata.
  • Controlli di accesso rigorosi basati sul principio del minimo privilegio.
  • Registrazione e monitoraggio completi degli accessi ai dati.

The Processor shall ensure that persons authorized to process Personal Data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality.

4. Sub-responsabili

The Controller provides general authorization for the Processor to engage Sub-processors. The Processor shall maintain an up-to-date list of Sub-processors and make it available to the Controller upon request. The current list of Sub-processors is published on our Privacy Policy page.

The Processor shall inform the Controller of any intended changes concerning the addition or replacement of Sub-processors, giving the Controller a reasonable opportunity to object to such changes. Where the Processor engages a Sub-processor, the Processor shall impose on that Sub-processor, by way of contract, the same data protection obligations as set out in this DPA.

The Processor shall remain fully liable to the Controller for the performance of any Sub-processor's obligations under this DPA.

5. Diritti degli interessati

The Processor shall assist the Controller in fulfilling its obligation to respond to requests from Data Subjects exercising their rights under Chapter III of the GDPR, including:

  • Diritto di accesso (Articolo 15).
  • Diritto alla rettifica (Articolo 16).
  • Diritto alla cancellazione (Articolo 17).
  • Diritto alla limitazione del trattamento (Articolo 18).
  • Diritto alla portabilità dei dati (Articolo 20).
  • Diritto di opposizione (Articolo 21).

If the Processor receives a request from a Data Subject directly, the Processor shall promptly forward the request to the Controller and shall not respond to the Data Subject directly unless authorized by the Controller.

6. Trasferimenti internazionali

The Processor shall not transfer Personal Data to a third country or international organization unless appropriate safeguards are in place as required by Chapter V of the GDPR. Approved transfer mechanisms include:

  • Clausole contrattuali standard (SCCs) adottate dalla Commissione europea (Decisione di esecuzione della Commissione (UE) 2021/914).
  • Decisioni di adeguatezza ai sensi dell'articolo 45 del GDPR.
  • Binding Corporate Rules approvate da un'autorità di vigilanza competente.

Enterprise customers may configure data residency settings to restrict the processing and storage of Personal Data to specific geographic regions (EU, US, or APAC), minimizing the need for cross-border transfers.

7. Notifica di violazione

The Processor shall notify the Controller without undue delay, and in any event no later than forty-eight (48) hours after becoming aware of a Personal Data breach, as defined in Article 4(12) of the GDPR.

La notifica dovrà includere:

  • Una descrizione della natura della violazione di dati personali, comprese le categorie e il numero approssimativo di interessati e record coinvolti.
  • Il nome e i dettagli di contatto del referente per la protezione dei dati del Responsabile del trattamento.
  • Una descrizione delle probabili conseguenze della violazione.
  • Una descrizione delle misure adottate o proposte per affrontare la violazione, comprese le misure per mitigare i suoi effetti negativi.

8. Audit e ispezioni

The Processor shall make available to the Controller all information necessary to demonstrate compliance with the obligations laid down in Article 28 of the GDPR. The Processor shall allow for and contribute to audits, including inspections, conducted by the Controller or an auditor mandated by the Controller, subject to reasonable advance notice and confidentiality obligations.

9. Durata ed eliminazione dei dati

This DPA shall remain in effect for the duration of the underlying service agreement. Upon termination of the service agreement, the Processor shall, at the choice of the Controller, delete or return all Personal Data and delete existing copies, unless Union or Member State law requires storage of the Personal Data. The Processor shall certify in writing that it has complied with this obligation upon the Controller's request.

Richiedi un DPA

To request a Data Processing Agreement, contact our compliance team. We will work with you to execute a DPA that meets your organization's data protection requirements.

Contatta il team Compliance Richiedi modello DPA