Data Processing Addendum
Version: 0.2
Version ID: data-processing-addendum:en:v0.2
Status: draft
Effective date: Not set
Content hash: 085d143824822948448d5b0091ccfc487300eb287fe4fc6c7d21f0b1e3efbc34
Operator / contracting entity: UAB Skillaxis, trading as InquOS
Company code: 307395574
Registered office: Architektų g. 56-101, LT-04111 Vilnius, Lithuania
Legal and support: support@sufoniq.com
Privacy contact: privacy@sufoniq.com
# Data Processing Addendum

> Status: Counsel-review draft; not approved for production.
> Operator / contracting entity: UAB Skillaxis, trading as InquOS
> Company code: 307395574
> Registered office: Architektų g. 56-101, LT-04111 Vilnius, Lithuania
> Legal and support contact: support@sufoniq.com
> Privacy contact: privacy@sufoniq.com

> Launch blockers retained from the authoritative v0.2 pack:
> - Controller/processor roles, instructions, subprocessors, transfers and security annex require factual completion and counsel approval.

## K2. Controller and processor role matrix

Workflow

InquOS role

Other party role

Instrument / decision

Account, security and platform operations

Controller

User / Customer as separate party

Privacy Notice; legitimate-interest and contract analysis.

Candidate creates own profile

Controller for platform purposes

Candidate is data subject

Core Terms and Privacy Notice.

Employer receives candidate submission

Usually independent controller for hiring

InquOS may be independent controller or processor for transfer/workspace

[CONFIRM WORKFLOW AND DRAFT ALLOCATION].

Agency uploads candidate

[CONFIRM]

Agency likely controller; candidate data subject

Authority evidence; privacy notice; DPA only if instruction model applies.

Organization private workspace

[CONFIRM PER FEATURE]

Customer controller where it determines purposes

DPA if InquOS processes solely on instructions.

Service-provider referral

Possible independent controller for platform/referral

Provider independent controller for service

Transparent handoff and separate provider terms.

AI model vendor

Controller or processor depending on feature

Vendor processor/subprocessor or separate controller

Vendor contract, DPA, transfer and training-use review.

Fraud, security and legal reporting

Controller

Authorities / affected parties

Legal obligation or legitimate-interest analysis.