Data Processing Addenduam

Customer Data Processing Addendum (DPA)

Last Updated: 26 January, 2026

This Customer Data Processing Addendum (“DPA”) forms part of the agreement between SKE Cloud Private Limited, having its registered office in Delhi, India (“SKE Cloud”, “Processor”), and the customer entity (“Customer”, “Controller”), governing the processing of personal data in connection with the use of SKE Cloud’s services.

Purpose and Scope

This DPA defines the obligations and responsibilities of the parties with respect to the processing of personal data under applicable data protection laws. It applies to all services provided by SKE Cloud, including Virtual Private Servers (VPS), dedicated servers, cloud computing resources, data storage, backup services, and private or organizational communication and collaboration platforms.

Roles of the Parties

For the purposes of this DPA, the Customer acts as the data controller and determines the purposes and means of processing personal data. SKE Cloud acts as a data processor, processing personal data solely on behalf of and in accordance with the Customer’s documented instructions.

Nature of Data Processing

SKE Cloud processes personal data only to provide, operate, secure, and maintain the Services. Processing activities may include storage, transmission, backup, recovery, and infrastructure-level support, as initiated and controlled by the Customer.

Categories of Data and Data Subjects

The categories of personal data and data subjects are determined and controlled solely by the Customer and may include personal data of employees, contractors, customers, or other authorized users whose data is processed within the Customer’s environment.

Customer Instructions

SKE Cloud shall process personal data only on documented instructions from the Customer, including those set out in the applicable service agreement, this DPA, and related documentation, unless required to do otherwise by applicable law.

Data Security Measures

SKE Cloud implements reasonable administrative, technical, and organizational measures designed to protect personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage, taking into account the nature of the processing and the risks involved.

Customer Responsibilities

The Customer is responsible for ensuring that its use of the Services complies with applicable data protection laws, including providing required notices, obtaining necessary consents, implementing appropriate security controls, and configuring encryption, access management, and retention policies within its environment.

Sub-Processors

SKE Cloud may engage sub-processors to assist in providing the Services, such as data center providers, network operators, or support service providers. SKE Cloud shall ensure that such sub-processors are bound by appropriate confidentiality and data protection obligations consistent with this DPA.

Confidentiality

SKE Cloud ensures that personnel authorized to process personal data are subject to confidentiality obligations and receive appropriate training regarding data protection and security.

Data Subject Rights

To the extent legally permitted and technically feasible, SKE Cloud shall assist the Customer in responding to requests from data subjects exercising their rights under applicable data protection laws. The Customer remains responsible for responding to such requests.

Data Breach Notification

In the event of a confirmed personal data breach affecting data processed on behalf of the Customer, SKE Cloud shall notify the Customer without undue delay and provide information reasonably required to support compliance with applicable breach notification obligations.

Data Retention and Deletion

Personal data processed on behalf of the Customer is retained for the duration of the Services. Upon termination of Services, data may be deleted in accordance with the Customer’s instructions, subject to backup cycles, legal holds, or statutory retention obligations.

Audit and Compliance

Upon reasonable written request and subject to confidentiality and security requirements, SKE Cloud shall provide information necessary to demonstrate compliance with this DPA. Audits, if any, shall be limited in scope and conducted in a manner that does not compromise security or other customers.

Legal Disclosure

SKE Cloud may disclose personal data where required to do so by applicable law, court order, or lawful government request. Where legally permitted, SKE Cloud shall notify the Customer of such disclosure requests.

International Data Transfers

As SKE Cloud provides services globally, personal data may be processed in multiple jurisdictions depending on service configuration. The Customer is responsible for ensuring that any cross-border data transfers comply with applicable legal requirements.

Limitation of Liability

Liability arising under this DPA shall be subject to the limitations of liability set forth in the applicable service agreement or Terms and Conditions.

Governing Law

This DPA shall be governed by and construed in accordance with the laws of India. Courts located in Delhi, India shall have exclusive jurisdiction.

Order of Precedence

In the event of any conflict between this DPA and the applicable service agreement or Terms and Conditions, this DPA shall prevail with respect to data protection obligations.