Data Protection Addendum (GDPR & NDPA Compliance) – Viapa AI
Effective Date: September 15th, 2025
This Addendum explains how Viapa AI complies with the EU GDPR and the Nigeria Data Protection Act (NDPA 2023).
1. Legal Basis for Processing
– Contract: To deliver wallet, Espees, and e-commerce services
– Consent: For marketing and cookies
– Legal Obligation: KYC/AML compliance via Parallex Bank
– Legitimate Interest: Fraud prevention, analytics
2. Roles
– Viapa AI – Data Controller
– Parallex Bank & Payment Partners – Sub-processors
– Cloud Providers (AWS, etc.) – Data Processors
3. Data Subject Rights
– Access, rectification, erasure
– Restrict processing & portability
– Lodge complaints with NDPC (Nigeria) or Supervisory Authority (EU)
4. International Transfers
Data may be transferred outside Nigeria/EU but safeguarded by SCCs and NDPA-compliant contracts.
5. Data Breach Notification
We will notify users and regulators within 72 hours of a confirmed breach.