Margeny

Data Processing Addendum

Last updated: 20 June 2026

This Data Processing Addendum (“DPA”) forms part of the Terms of Service between you (the “Customer” / merchant) and Margeny, operated by Diego Bermejo (sole trader / autónomo). It applies where Margeny processes personal data on the Customer’s behalf.

1. Roles

For personal data contained in the store and ad-account data you connect — including your end customers’ names, email addresses and order history — you are the controller and Margeny is the processor. Margeny processes that data only on your documented instructions, which include providing the analytics features of the service.

2. Subject matter and duration

The processing concerns the provision of margin and profit analytics for the duration of your subscription and until data is deleted in line with our Privacy Policy.

3. Nature and purpose

Ingesting, storing and transforming connected store and advertising data to compute revenue, costs, margins and related metrics that we present back to you.

4. Categories of data and data subjects

  • Data subjects: your end customers.
  • Personal data: name, email, and order/purchase history.

5. Our obligations as processor

  • Process personal data only on your documented instructions.
  • Ensure people authorised to process the data are bound by confidentiality.
  • Implement appropriate technical and organisational security measures, including encryption of connected-platform access tokens at rest and tenant isolation between accounts.
  • Engage sub-processors (listed in our Privacy Policy) only under terms that provide equivalent protection, and inform you of intended changes.
  • Assist you, taking into account the nature of processing, with data subject requests and your security, breach-notification and impact- assessment obligations.
  • Notify you without undue delay after becoming aware of a personal data breach.
  • On termination, delete or return the personal data, subject to legal retention requirements.

6. International transfers

Our primary database is in the EU. Where a sub-processor is outside the EU, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses.

7. Audit

We will make available information reasonably necessary to demonstrate compliance with this DPA.

8. Contact

Data protection enquiries: privacy@margeny.com.