Data Processing Agreement

1. Roles The agency is the controller/responsible party for its clients' and passengers' data. Volare Manager acts as a provider/processor to deliver the contracted service. 2. Instructions Volare Manager processes data according to the agency's functional instructions inside the system: saving, viewing, organizing, generating documents, emails, invoices, bookings, backups, and support. 3. Confidentiality Volare Manager will not sell passenger data or use documents uploaded by agencies for its own marketing. 4. Security Volare Manager will apply reasonable security measures, company isolation, access controls, records, and backups. 5. Sub-processors Hosting, email, payment, storage, API, AI, backup, and other providers may participate when necessary for the service. 6. Deletion or Return When the service ends, data deletion or export may be requested subject to technical availability, legal obligations, and outstanding payments.