DATA PROTECTION ADDENDUM–CONTROLLER-PROCESSOR