Data Processing Addendum

1. 1. Roles of the parties

Customer is the controller of personal data contained in workspace content, and Hyper is the processor of that data.

Hyper acts as an independent controller for account, billing and usage information it processes to operate its business, as described in the Privacy Policy.

2. 2. Scope and instructions

Hyper will process Customer personal data only on Customer's documented instructions, including as set out in the agreement and through Customer's configuration of the Services.

Hyper will inform Customer if it believes an instruction violates applicable data protection law.

3. 3. Confidentiality

Hyper ensures that personnel authorized to process Customer personal data are bound by appropriate obligations of confidentiality.

4. 4. Security measures

Hyper implements technical and organizational measures designed to protect Customer personal data, including access control, audit trails, encryption and personnel security practices, as further described in the Security Policy.

5. 5. Subprocessors

Customer authorizes Hyper to engage subprocessors to help provide the Services. Hyper imposes data protection obligations on each subprocessor that are no less protective than those in this DPA.

A current list of subprocessors is available on request. Hyper will notify Customer of new subprocessors, and Customer may object on reasonable data protection grounds.

6. 6. Data subject requests

Taking into account the nature of the processing, Hyper will assist Customer with reasonable requests to respond to individuals exercising their data protection rights.

7. 7. Personal data breaches

Hyper will notify Customer without undue delay after becoming aware of a personal data breach affecting Customer personal data, and will provide information reasonably needed for Customer to meet its obligations.

8. 8. International transfers

Where Customer personal data is transferred across borders, Hyper will use appropriate transfer mechanisms, such as standard contractual clauses, where required by applicable law.

9. 9. Audits

Hyper will make available information reasonably necessary to demonstrate compliance with this DPA, and will allow for reasonable audits subject to confidentiality and advance notice.

10. 10. Deletion and return

On termination of the Services, Hyper will, at Customer's choice, return or delete Customer personal data within a reasonable period, unless retention is required by applicable law.

Questions about this DPA? Contact legal@hyper.ventureship.xyz.