[{"data":1,"prerenderedAt":4},["ShallowReactive",2],{"legal-en-dpa":3},"\u003Ch1>Data processing agreement (DPA)\u003C\u002Fh1>\n\u003Cp>\u003Cem>Version 2027-01, in force from 20 October 2026 — Article 28 of the GDPR and the Swiss Federal Act on Data Protection (FADP)\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>This agreement forms part of the \u003Ca href=\".\u002Fterms\">terms and conditions\u003C\u002Fa>. It applies to the personal data that the Customer (the \u003Cstrong>controller\u003C\u002Fstrong>) records in its Fluidify workspace, processed by 7th World Ltd (the \u003Cstrong>processor\u003C\u002Fstrong>).\u003C\u002Fp>\n\u003Ch2>1. Subject matter and duration\u003C\u002Fh2>\n\u003Cp>The processor hosts and processes the Customer's data solely to provide the Service described in the terms and conditions, for the duration of the subscription and until the erasure provided for in clause 9.\u003C\u002Fp>\n\u003Ch2>2. Nature of the data and data subjects\u003C\u002Fh2>\n\u003Ctable>\n\u003Cthead>\n\u003Ctr>\n\u003Cth>Data subjects\u003C\u002Fth>\n\u003Cth>Data\u003C\u002Fth>\n\u003C\u002Ftr>\n\u003C\u002Fthead>\n\u003Ctbody>\n\u003Ctr>\n\u003Ctd>The Customer's customers and prospects, and their contacts\u003C\u002Ftd>\n\u003Ctd>identity, contact details, site addresses, correspondence, quotes, invoices, payments\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>The Customer's employees and users\u003C\u002Ftd>\n\u003Ctd>identity, email, phone, role, time clocking and timesheets, certifications, signatures, photos taken during service jobs\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>Signatories of reports\u003C\u002Ftd>\n\u003Ctd>name, position, signature\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003C\u002Ftbody>\n\u003C\u002Ftable>\n\u003Cp>The Service is not designed for sensitive data within the meaning of Article 9 of the GDPR; the Customer shall refrain from recording any.\u003C\u002Fp>\n\u003Ch2>3. Instructions\u003C\u002Fh2>\n\u003Cp>The processor processes the data only on documented instructions from the Customer, consisting of the terms and conditions, this agreement and the use of the Service. It informs the Customer if an instruction appears to it to infringe the regulations.\u003C\u002Fp>\n\u003Ch2>4. Confidentiality\u003C\u002Fh2>\n\u003Cp>The persons authorised to access the data (7th World Ltd operators) are bound by an obligation of confidentiality. Their access is limited to what support and operations require, and is logged.\u003C\u002Fp>\n\u003Ch2>5. Security\u003C\u002Fh2>\n\u003Cp>The processor implements, in particular:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>a dedicated virtual server per Customer, with no shared database;\u003C\u002Fli>\n\u003Cli>encryption of communications (HTTPS) and of backups;\u003C\u002Fli>\n\u003Cli>sign-in by single-use code, time-limited and revocable sessions, role-based permissions and an audit log;\u003C\u002Fli>\n\u003Cli>daily backups to a separate append-only server, and tested restores;\u003C\u002Fli>\n\u003Cli>application of security patches, and updates with automatic rollback.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch2>6. Sub-processors\u003C\u002Fh2>\n\u003Cp>The Customer authorises the use of the following sub-processors:\u003C\u002Fp>\n\u003Ctable>\n\u003Cthead>\n\u003Ctr>\n\u003Cth>Sub-processor\u003C\u002Fth>\n\u003Cth>Role\u003C\u002Fth>\n\u003Cth>Location\u003C\u002Fth>\n\u003C\u002Ftr>\n\u003C\u002Fthead>\n\u003Ctbody>\n\u003Ctr>\n\u003Ctd>Contabo GmbH\u003C\u002Ftd>\n\u003Ctd>hosting of servers and backups\u003C\u002Ftd>\n\u003Ctd>Germany (EU)\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>Gandi SAS\u003C\u002Ftd>\n\u003Ctd>sending the Service's emails\u003C\u002Ftd>\n\u003Ctd>France (EU)\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003C\u002Ftbody>\n\u003C\u002Ftable>\n\u003Cp>The processor informs the Customer by email of any addition or replacement at least 30 days in advance; the Customer may object by cancelling at no cost.\u003C\u002Fp>\n\u003Ch2>7. Assistance\u003C\u002Fh2>\n\u003Cp>The processor helps the Customer to respond to requests from data subjects exercising their rights (in particular through the Service's export and editing functions), to carry out an impact assessment where necessary, and to comply with its security obligations.\u003C\u002Fp>\n\u003Ch2>8. Personal data breach\u003C\u002Fh2>\n\u003Cp>The processor notifies the Customer of any personal data breach without undue delay, and no later than \u003Cstrong>48 hours\u003C\u002Fstrong> after becoming aware of it, with the information available to enable the Customer to notify the supervisory authority.\u003C\u002Fp>\n\u003Ch2>9. End of the agreement\u003C\u002Fh2>\n\u003Cp>At the end of the subscription, the Customer has 15 days of read-only access to export its data. The server is then wiped; the encrypted backups are deleted no later than 12 months after closure.\u003C\u002Fp>\n\u003Ch2>10. Audit\u003C\u002Fh2>\n\u003Cp>The processor makes available to the Customer the information necessary to demonstrate compliance with this agreement. An audit may be requested once a year, with 30 days' notice, at the Customer's expense.\u003C\u002Fp>\n\u003Ch2>11. Transfers\u003C\u002Fh2>\n\u003Cp>Data is hosted in the European Union. 7th World Ltd is established in the United Kingdom, which benefits from an adequacy decision of the European Commission; access from the United Kingdom is governed by that decision. No other transfer outside the European Union takes place.\u003C\u002Fp>\n",1792508124965]