Data Processing Addendum

Status: Counsel-review draft; not approved for production.

Operator / contracting entity: UAB Skillaxis, trading as InquOS

Company code: 307395574

Registered office: Architektų g. 56-101, LT-04111 Vilnius, Lithuania

Legal and support contact: support@sufoniq.com

Privacy contact: privacy@sufoniq.com

Launch blockers retained from the authoritative v0.2 pack:

- Controller/processor roles, instructions, subprocessors, transfers and security annex require factual completion and counsel approval.

K2. Controller and processor role matrix

Workflow

InquOS role

Other party role

Instrument / decision

Account, security and platform operations

Controller

User / Customer as separate party

Privacy Notice; legitimate-interest and contract analysis.

Candidate creates own profile

Controller for platform purposes

Candidate is data subject

Core Terms and Privacy Notice.

Employer receives candidate submission

Usually independent controller for hiring

InquOS may be independent controller or processor for transfer/workspace

[CONFIRM WORKFLOW AND DRAFT ALLOCATION].

Agency uploads candidate

[CONFIRM]

Agency likely controller; candidate data subject

Authority evidence; privacy notice; DPA only if instruction model applies.

Organization private workspace

[CONFIRM PER FEATURE]

Customer controller where it determines purposes

DPA if InquOS processes solely on instructions.

Service-provider referral

Possible independent controller for platform/referral

Provider independent controller for service

Transparent handoff and separate provider terms.

AI model vendor

Controller or processor depending on feature

Vendor processor/subprocessor or separate controller

Vendor contract, DPA, transfer and training-use review.

Fraud, security and legal reporting

Controller

Authorities / affected parties

Legal obligation or legitimate-interest analysis.