Data Processing Agreement.
Version 1.0 · Effective 6 August 2026
This Data Processing Agreement forms part of the agreement between DREAMLAB STUDIO PTY LTD, trading as Tische (“Processor”), and the customer using Tische (“Controller”) where Tische processes personal information on the customer’s behalf.
1. Scope and instructions
Tische processes reservation, guest, team-member, campaign and connected-provider data only to provide, secure, support and improve the contracted service, on documented customer instructions and as required by law.
2. Confidentiality and security
Tische limits access to authorised personnel and applies proportionate technical and organisational controls, including access controls, encryption in transit, tenant isolation, logging and tested recovery procedures. The customer remains responsible for lawful collection, notices, consents and user access.
3. Subprocessors
The customer gives general written authorisation for the providers on Tische’s public Subprocessor List. Tische will require materially equivalent data-protection obligations and email the customer’s nominated representative before a material addition or replacement begins processing customer personal information where reasonably practicable. The customer may raise a reasonable data-protection objection through the address on that list.
4. Requests and incidents
Tische will reasonably assist with data-subject requests, regulatory enquiries and security assessments. Tische will notify affected customers without undue delay after confirming a personal-data breach and provide available information needed for the customer’s response.
5. International transfers
Where personal information is transferred internationally, Tische will use an applicable lawful transfer mechanism and supplementary safeguards where required.
6. Return and deletion
On termination, Tische will make customer data available for export for the agreed period, then delete or de-identify it unless retention is legally required. Backup copies age out under the applicable retention schedule.
7. Audit
Tische will provide reasonable information demonstrating compliance. Audits must be proportionate, protect other customers, follow reasonable notice and avoid unnecessary operational disruption.
Contract status. This public DPA is the standard product schedule. A signed order form may identify the customer, processing details, approved transfer mechanism and any negotiated terms.