Business GDPR Feature

BUSINESS GDPR FEATURE AGREEMENT

This Business GDPR Feature Agreement (the Agreement) is entered into as of Effective Date: by and between Provider Name: and Client Name: .

WHEREAS

WHEREAS, Provider operates the Business GDPR Feature, a suite of technical and administrative controls and functionality designed to enable Client to fulfill obligations under applicable data protection law; and

WHEREAS, Client desires to license and enable the Business GDPR Feature for the purpose of processing personal data in connection with Client's use of Provider's services; and

WHEREAS, the parties intend to set forth the terms, responsibilities, and safeguards applicable to personal data processed in connection with the Business GDPR Feature.

SCOPE OF WORK

PAYMENT TERMS

Invoices are due within days of invoice receipt. Late payments shall incur interest at the lesser of % per month or the maximum permitted by applicable law.

TERM AND TERMINATION

This Agreement commences on Start Date: and continues through End Date: unless earlier terminated as provided herein.

Either party may terminate this Agreement for convenience upon days' prior written notice. Either party may terminate immediately upon written notice if the other party materially breaches any obligation relating to data protection and fails to cure within 30 days after written notice of such breach.

CONFIDENTIALITY

Each party shall treat non‑public information of the other party, including technical, business and personal data, as confidential and shall not disclose such information except to those employees, contractors, or advisors who have a need to know and who are bound by confidentiality obligations at least as protective as those herein. Confidential information does not include information that: (a) is or becomes public without breach of this Agreement; (b) was rightfully in the receiving party's possession prior to disclosure; or (c) is independently developed by the receiving party without use of the disclosing party's confidential information.

DATA PROTECTION AND GDPR COMPLIANCE

Role Designation — Provider acknowledges the role it performs in relation to personal data processed through the Business GDPR Feature. Provider role (select all that apply): Controller Processor

Client role (select all that apply): Controller Processor

Breach Notification — Provider shall notify Client without undue delay and in any event within hours of becoming aware of a personal data breach affecting Client data, providing sufficient information to allow Client to meet its regulatory obligations.

Transfers of Personal Data — Where data transfers to jurisdictions outside the EEA or otherwise restricted by applicable law are required, the parties shall implement appropriate safeguards and document such safeguards in writing. Describe transfer mechanism or safeguards:

Return or Deletion — Upon termination or expiration of this Agreement, Provider shall, at Client's option, return or securely delete personal data within days, except to the extent retention is required by applicable law, in which case Provider shall isolate and protect such retained data from further processing.

GOVERNING LAW

This Agreement shall be governed by and construed in accordance with the laws of the State of without regard to conflict of laws principles.

ENTIRE AGREEMENT

This Agreement, together with any exhibits and appendices attached hereto, constitutes the entire agreement between the parties with respect to the subject matter hereof and supersedes all prior or contemporaneous oral or written agreements, understandings, or communications relating to such subject matter. Any amendment to this Agreement must be in writing and signed by authorized representatives of both parties.

NOTICES

Sign Now