Data Processing Addendum
Contractual terms for processing personal data on behalf of customers.
1. Roles
Where Kampra processes personal data on behalf of a customer, the customer is the controller and Kampra is the processor. This DPA supplements the Terms of Service.
2. Scope and duration
Kampra processes personal data as necessary to provide the Services for the duration of the customer's subscription.
3. Subprocessors
Kampra engages subprocessors listed in the Subprocessor List. Kampra will provide notice of changes and imposes contractual obligations consistent with this DPA on subprocessors.
4. Security
Kampra implements technical and organizational measures described in the Security Overview.
5. International transfers
[ATTORNEY REVIEW] Standard Contractual Clauses (2021) or successor transfer mechanisms will be incorporated by reference for cross-border transfers. Modules and Annexes to be completed by counsel.
6. Data subject requests
Kampra will provide reasonable assistance to enable the customer to respond to data subject requests.
7. Breach notification
Kampra will notify the customer without undue delay after becoming aware of a personal data breach affecting the customer's data.
8. Audit
Kampra will make available information necessary to demonstrate compliance and, subject to confidentiality, allow for audits as required by applicable law.
9. Deletion
Upon termination, Kampra will delete or return personal data as described in the Data Retention Policy.
10. Contact
To execute a DPA contact privacy@trykampra.com.