Data Processing Addendum

Scope

Where Wewed processes personal data on behalf of a business customer and applicable data-protection law requires processor terms, this addendum supplements the customer agreement. The customer determines the permitted purpose and is responsible for having a lawful basis for the data it instructs Wewed to process.

Processing commitments

• Process covered data on documented instructions, except where law requires otherwise.
• Apply appropriate confidentiality and security controls.
• Use subprocessors subject to appropriate data-protection obligations.
• Provide reasonable assistance with legally required data-subject and incident obligations, taking account of the nature of processing.
• Delete or return covered data as required by the agreement and applicable law, subject to lawful retention obligations.

Jurisdiction-specific terms

International transfer mechanisms, controller/processor details and legally required annexes depend on the customer and jurisdiction and should be incorporated into an order form or signed DPA where required.