1. Definitions

Data Controller

The customer (client) who determines the purpose and means of processing personal and business data within the Salsabeel ERP system.

Data Processor

Salsabeel ERP by Al-Bari Technologies, acting as the service provider responsible for processing customer data on behalf of the client.

Personal Data

Any information related to an identified or identifiable person, including names, contact details, employee records, customer records, financial information, and operational business data.

Processing

Any operation performed on data including collection, storage, organization, access, transfer, modification, backup, and deletion.

2. Scope of Processing

Salsabeel ERP processes data only for the purpose of delivering contracted services, including:

• ERP operations and workflow management
• Inventory and sales processing
• Customer and supplier management
• HR and payroll management
• Financial transactions and reporting
• Cloud hosting and backup services
• API integrations and automation services
• System maintenance and technical support

We do not process customer data for unrelated commercial purposes.

4. Security Measures

We implement strong technical and organizational security measures, including:

• Encrypted data transmission
• Role-based access controls
• User permission management
• Secure cloud hosting infrastructure
• Regular automated backups
• Firewall and server-level security
• Access monitoring and audit logs
• Internal access restrictions for staff
• Secure authentication protocols

These measures are designed to protect against unauthorized access, loss, misuse, or disclosure.

5. Confidentiality

All employees, contractors, and technical staff involved in service delivery are bound by strict confidentiality obligations. Customer data is never shared, sold, or disclosed to unauthorized third parties. Access is limited only to authorized personnel required for support, maintenance, or implementation purposes.

7. Data Retention

Customer data is retained only for the duration of the active service agreement and any legally required retention period. Upon service termination, customers may request:

• Data export
• Data migration support
• Permanent deletion of stored records where applicable

Retention periods may vary depending on compliance, accounting, or contractual obligations.

9. International Data Transfers

Where cloud infrastructure or subprocessors involve international data transfers, appropriate safeguards are applied to maintain data protection standards and compliance requirements. Customer data is handled with the same level of protection regardless of storage location.

11. Audit & Compliance Support

Upon reasonable request, Salsabeel ERP may provide relevant documentation regarding security controls, compliance practices, and data protection measures for enterprise customers requiring compliance verification.

12. Agreement Validity

This DPA forms part of the service relationship between the customer and Salsabeel ERP and remains effective throughout the active service period. It supports compliance obligations and reinforces our commitment to secure, responsible, and transparent data handling.