Data Processing Addendum
This addendum forms part of the Terms of Service between the customer (controller) and UP N RUNNING (processor) for personal data processed in Zotoloop on the customer's behalf.
Processing
Subject matter: outreach research, email sending, reply handling and related records. Duration: the term of the agreement plus the deletion period. Data subjects: business contacts and prospects the customer selects. Data: names, roles, business contact details, company information, message content and engagement events.
Processor obligations
- Process only on documented instructions, including those given through the product.
- Ensure people with access are bound by confidentiality.
- Apply appropriate technical and organisational measures, described on the security page.
- Use only the sub-processors listed publicly, under written terms with equivalent protection, and give notice of changes.
- Help the customer respond to data subject requests and with security and impact assessments.
- Notify the customer without undue delay after becoming aware of a personal data breach.
- Delete or return personal data at the end of the service.
- Make information available to demonstrate compliance.
Transfers
Where personal data moves to a country without an adequacy decision, the parties rely on the applicable standard contractual clauses or an equivalent lawful mechanism.