Between:
AppReply (the “Processor”)
Email: help@appreply.co
And
[Client Name] (the “Controller”)
Email: [Client Email]
Address: [Client Address]
For the purposes of this Agreement, the following terms shall have the meanings set out below:
The Processor shall process Personal Data on behalf of the Controller in accordance with this Agreement. This Agreement shall commence on the effective date of the main agreement and continue until the termination of the Services.
The Processor will process Personal Data as necessary to provide the Services and in accordance with the documented instructions of the Controller.
Types of Personal Data: Names, email addresses, job titles, company names, payment information, and any other Personal Data provided by the Controller.
Categories of Data Subjects: The Controller's employees, customers, users, and any other individuals whose Personal Data is provided by the Controller.
The Controller warrants that it complies with all applicable data protection laws regarding the Personal Data provided to the Processor. The Controller is responsible for:
The Processor agrees to:
The Controller provides a general authorization to the Processor to engage Sub-processors for carrying out processing activities on behalf of the Controller. The Processor shall inform the Controller of any intended changes concerning the addition or replacement of Sub-processors, giving the Controller the opportunity to object.
The Processor currently engages the following Sub-processors:
Personal Data may be transferred to, and processed in, countries outside of the European Economic Area (EEA). The Processor shall ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place.
The Processor shall implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including but not limited to:
The Processor shall assist the Controller by appropriate technical and organizational measures, insofar as possible, to fulfill the Controller's obligations to respond to requests to exercise Data Subject rights under applicable data protection laws.
In the event of a Personal Data breach, the Processor shall notify the Controller without undue delay after becoming aware of the breach. The Processor shall provide the Controller with sufficient information to allow the Controller to meet any obligations to report or inform Data Subjects or supervisory authorities of the Personal Data breach.
Upon termination of the Services, the Processor shall, at the choice of the Controller, delete or return all Personal Data to the Controller and delete existing copies unless applicable law requires storage of the Personal Data.
The Processor shall make available to the Controller all information necessary to demonstrate compliance with the obligations laid down in this Agreement and allow for and contribute to audits, including inspections, conducted by the Controller or another auditor mandated by the Controller.
Each Party shall be liable for damages caused by processing that infringes applicable data protection laws. The Processor shall be liable for the damage caused by processing only where it has not complied with obligations of data protection laws specifically directed to processors or where it has acted outside or contrary to lawful instructions of the Controller.
This Agreement shall be governed by and construed in accordance with the laws of Norway. Any disputes arising out of or in connection with this Agreement shall be subject to the exclusive jurisdiction of the courts of Norway.
Any amendments to this Agreement shall be in writing and signed by both Parties.
This Agreement constitutes the entire agreement between the Parties relating to the processing of Personal Data and supersedes any prior agreements.
For the Controller:
Name: __________________________
Title: __________________________
Signature: _______________________
Date: ___________________________
For the Processor (AppReply):
Name: __________________________
Title: __________________________
Signature: _______________________
Date: ___________________________
Last updated: October 1, 2024.