Wixxir Data Processing Addendum (DPA)
(B2B Customers – GDPR Compliant)

Legal Entity: GPM Invest & Trade Inc.
(“Wixxir”)

Effective Date: January 2026

1. Scope

This Data Processing Addendum applies to Business Users acting as data controllers who use the Wixxir platform.

2. Roles of the Parties

Business User is the Data Controller.
Wixxir acts as a Data Processor solely to provide the platform services.

3. Processing Details

Personal data is processed for platform operation, transaction facilitation, fraud prevention, and compliance.

4. Security Measures

Wixxir implements appropriate technical and organizational measures to protect personal data.

5. Subprocessors

Wixxir may engage subprocessors subject to confidentiality and security obligations.

6. Data Subject Rights

Wixxir assists Business Users in responding to data subject requests where applicable.

7. International Transfers

Data may be transferred to the United States subject to appropriate safeguards.

8. Deletion and Return

Upon termination, personal data will be deleted or returned as required by law.

9. Liability

Liability is subject to the limitations set forth in the Master Agreement.