This Data Processing Addendum ("DPA") was published on 22 March, 2021
All capitalized terms not defined in this DPA shall have the meanings set forth in the Agreement. For the avoidance of doubt, all references to the Agreement shall include this DPA (including the SCCs (where applicable), as defined herein.
The terms "personal data", "controller", "data subject", "processor" and "processing" shall have the meaning given to them under applicable Data Protection Laws or if not defined thereunder, the GDPR, and "process", "processes" and "processed", with respect to any personal data, shall be interpreted accordingly.
Deletion or return on termination. Upon termination or expiration of the Agreement, eyeZy shall (at User’s election) delete or return to User all Child Data (including copies) in its possession or control, except that this requirement shall not apply to the extent eyeZy is required by applicable law to retain some or all of the Child Data, or to Child Data it has archived on back-up systems, which Child Data eyeZy shall securely isolate, protect from any further processing and eventually delete in accordance with eyeZy’s deletion policies, except to the extent required by applicable law.
To the extent eyeZy processes Child Data originating from and protected by Data Protection Laws in one of the jurisdictions listed in Annex D, then the terms specified in Annex D with respect to the applicable jurisdiction(s) (“Jurisdiction-Specific Terms”) apply in addition to the terms of this DPA. In the event of any conflict or ambiguity between the Jurisdiction-Specific Terms and any other terms of this DPA, the applicable Jurisdiction-Specific Terms will take precedence, but only to the extent of the Jurisdiction-Specific Terms’ applicability to eyeZy.
The Security Measures applicable to the Service are described here (as updated from time to time in accordance with Section 4.3 of this DPA).
Standard Contractual Clauses