{"id":487,"date":"2024-07-08T11:57:49","date_gmt":"2024-07-08T11:57:49","guid":{"rendered":"https:\/\/kristofer.quickchannel.com\/?page_id=487"},"modified":"2026-06-15T10:56:51","modified_gmt":"2026-06-15T10:56:51","slug":"dpa","status":"publish","type":"page","link":"https:\/\/quickchannel.com\/fi\/dpa\/","title":{"rendered":"Quickchannel Data Processing Agreement"},"content":{"rendered":"\n<div class=\"wp-block-cover alignfull is-light\" style=\"padding-top:168px;padding-bottom:136px\"><img loading=\"lazy\" decoding=\"async\" width=\"1440\" height=\"802\" class=\"wp-block-cover__image-background wp-image-16720 size-large\" alt=\"Top banner\" src=\"\/wp-content\/uploads\/2025\/06\/orange-lines-background.svg\" style=\"object-position:50% 100%\" data-object-fit=\"cover\" data-object-position=\"50% 100%\"\/><span aria-hidden=\"true\" class=\"wp-block-cover__background has-background-dim-0 has-background-dim\"><\/span><div class=\"wp-block-cover__inner-container is-layout-constrained wp-block-cover-is-layout-constrained\">\n<h2 class=\"wp-block-heading has-text-align-center heading-h6 has-text-color has-link-color wp-elements-00b6c08307a138bf4fb82431d1d6041e\" style=\"color:#81350d;margin-top:0;margin-right:0;margin-bottom:0;margin-left:0;text-transform:uppercase\"><strong>QUICKCHANEL DATA PROCESSING AGREEMENT<\/strong><\/h2>\n\n\n\n<h1 class=\"wp-block-heading has-text-align-center heading-h1 has-text-color has-link-color wp-elements-b0bb5b97ec76e5d2fe4be1a224805534\" style=\"color:#462004;margin-top:0;margin-right:0;margin-bottom:0;margin-left:0;font-size:56px\"><strong>Quickchannel Data Processing Agreement&nbsp;<\/strong>&nbsp;<\/h1>\n\n\n\n<p class=\"has-text-align-center paragraph-xl has-text-color has-link-color wp-elements-48718b2006a2b88cabed6193f048339e wp-block-paragraph\" style=\"color:#462004\"><em>Updated:<\/em> June 2026<br>Version: 2026.06<\/p>\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-group alignwide is-style-narrow is-layout-constrained wp-container-core-group-is-layout-9cb2c61b wp-block-group-is-layout-constrained\" style=\"padding-right:0;padding-left:0\">\n<ol start=\"1\" class=\"wp-block-list\">\n<li><strong>Introduction&nbsp;<\/strong>\n<ul class=\"wp-block-list\">\n<li>The&nbsp;Data processor will in connection with the provision of the Services&nbsp;process&nbsp;personal data as a processor on behalf of the&nbsp;Data controller. To the extent the processing of personal data is subject to Applicable Data Protection&nbsp;Laws,&nbsp;this data processing agreement (&#8221;<strong>DPA<\/strong>&#8221;) applies. This DPA forms an integral part of the Subscription Agreement.&nbsp;&nbsp;<\/li>\n\n\n\n<li>The Parties agree that a Partner may&nbsp;enter into&nbsp;this DPA on behalf of the&nbsp;Data controller.&nbsp;<\/li>\n\n\n\n<li>This DPA supersedes and replaces any data processing agreements previously concluded between the Parties.&nbsp;<\/li>\n\n\n\n<li>Applicable Data Protection Laws apply to the processing of personal data covered by this DPA.&nbsp;<\/li>\n\n\n\n<li>In the event of&nbsp;any conflict or inconsistency between this DPA and the terms of the Subscription Agreement, the terms of this DPA shall prevail.&nbsp;<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<ol start=\"2\" class=\"wp-block-list\">\n<li><strong>Definitions&nbsp;<\/strong>\n<ul class=\"wp-block-list\">\n<li>The following defined terms are used in this DPA:&nbsp;<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td>&#8221;<strong>Applicable Data Protection Laws<\/strong>&#8221;&nbsp;<\/td><td>means the GDPR and all data protection legislation and regulations, including regulations issued by relevant Supervisory Authority, protecting the fundamental rights and freedoms of data subjects with respect to the processing of their personal data, that apply to the Parties;&nbsp;<\/td><\/tr><tr><td>&#8221;<strong>Applicable Laws<\/strong>&#8221;&nbsp;<\/td><td>means laws and regulations under EU law and relevant Member State laws that apply to the Parties;&nbsp;<\/td><\/tr><tr><td>&#8221;<strong>Data Subject Request<\/strong>&#8221;&nbsp;<\/td><td>means a request from a data subject to exercise rights afforded to data subjects under Applicable Data Protection Laws;&nbsp;<\/td><\/tr><tr><td>&#8221;<strong>GDPR<\/strong>&#8221;&nbsp;<\/td><td>Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons&nbsp;with regard to&nbsp;the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation);&nbsp;<\/td><\/tr><tr><td>&#8221;<strong>Instruction<\/strong>&#8221;&nbsp;<\/td><td>means documented instructions issued by the Data controller that sets out the subject-matter and duration of the processing, the nature and purpose of the processing, the type of personal data and categories of data subjects and any specific requirements that apply to the processing, including Schedule 1 of this DPA;&nbsp;<\/td><\/tr><tr><td>&#8221;<strong>Partner<\/strong>&#8221;&nbsp;&nbsp;<\/td><td>means a legal entity authorized by the Data processor under a commercial agreement to re-sell the Services to the Data controller;&nbsp;&nbsp;<\/td><\/tr><tr><td><strong>\u201cData processor\u201d<\/strong>&nbsp;&nbsp;<\/td><td>Data processor is the part who processes personal data on behalf of the data controller.&nbsp;<\/td><\/tr><tr><td><strong>\u201cData controller\u201d<\/strong>&nbsp;<strong><\/strong>&nbsp;<\/td><td>Data controller is the part who decides for what purposes the data will be processed and how the processing will be carried out&nbsp;<\/td><\/tr><tr><td>&#8221;<strong>Subprocessor<\/strong>&#8221;&nbsp;<\/td><td>means a subcontractor, supplier, consultant or third party engaged by the Data processor to process personal data on behalf of the Data controller;&nbsp;<\/td><\/tr><tr><td>&#8221;<strong>Supervisory Authority<\/strong>&#8221;&nbsp;<\/td><td>means an independent public authority which is established by a Member State pursuant to Article 51 of the GDPR&nbsp;<\/td><\/tr><tr><td>&#8221;<strong>Third Country<\/strong>&#8221;&nbsp;<\/td><td>means a country which is not a member of the European Union (EU) or the European Economic Area (EEA).&nbsp;<\/td><\/tr><tr><td><strong>\u201cUser generated information\u201d<\/strong>&nbsp;<\/td><td>User behavior when using the Services, e.g. information about clicks and site visits.&nbsp;<\/td><\/tr><tr><td><strong>\u201cIdentification information\u201d<\/strong>&nbsp;<\/td><td>Name, Username&nbsp;<\/td><\/tr><tr><td><strong>\u201cContent\u201d<\/strong>&nbsp;<\/td><td>Video, audio, chat conversation, content in support conversations.&nbsp;<\/td><\/tr><tr><td><strong>\u201cContact information\u201d<\/strong>&nbsp;<\/td><td>E-mail, phone number&nbsp;&nbsp;<\/td><\/tr><tr><td><strong>\u201cProfile information\u201d<\/strong>&nbsp;&nbsp;<\/td><td>Title, company or organization of the registered individual.&nbsp;&nbsp;<\/td><\/tr><tr><td><strong>\u201cTechnical information\u201d<\/strong>&nbsp;<strong><\/strong>&nbsp;<\/td><td>IP-address, web browser, operating system, type of device.&nbsp;&nbsp;<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Lower case terms used but not defined in this DPA, such as &#8221;controller&#8221;, &#8221;processor&#8221;, &#8221;personal data&#8221; and &#8221;processing&#8221; shall have the same meaning as in Article 4 of the GDPR.&nbsp;<\/li>\n\n\n\n<li>Capitalized terms used, but not defined in this DPA, shall have the same meaning as in the General Terms and Conditions, as amended from time to time, available on <a href=\"https:\/\/quickchannel.com\/toc\" target=\"_blank\" rel=\"noreferrer noopener\">www.quickchannel.com\/en\/toc<\/a>.&nbsp;&nbsp;<\/li>\n<\/ul>\n\n\n\n<ol start=\"3\" class=\"wp-block-list\">\n<li><strong>General obligations on the&nbsp;Data processor&nbsp;<\/strong>\n<ul class=\"wp-block-list\">\n<li>The&nbsp;Data processor&nbsp;agrees to only process personal data on behalf of the&nbsp;Data&nbsp;controller&nbsp;in accordance with&nbsp;any Instruction of the&nbsp;Data&nbsp;controller&nbsp;and Applicable Data Protection Laws.&nbsp;<\/li>\n\n\n\n<li>Any further Instruction with respect to the processing of personal data shall be provided to the&nbsp;Data processor by way of e-mail to the following address:&nbsp;<a href=\"mailto:legal@quickchannel.com\" target=\"_blank\" rel=\"noreferrer noopener\">legal@quickchannel.com<\/a>. If the&nbsp;Data&nbsp;controller&nbsp;issues new Instructions which are over and beyond what Applicable Data Protection Laws require or which is not supported by the Services, the&nbsp;Data processor&nbsp;shall, if the&nbsp;Data&nbsp;controller&nbsp;maintains the Instruction, be entitled to reasonable compensation for the cost that the new Instruction implies or otherwise according to a separate agreement between the Parties.&nbsp;<\/li>\n\n\n\n<li>Notwithstanding what is&nbsp;stated&nbsp;in Clause&nbsp;3.1&nbsp;above&nbsp;the&nbsp;Data processor&nbsp;may process the personal data to the extent it is necessary&nbsp;in order to&nbsp;comply with&nbsp;legal requirements under Applicable Laws to which&nbsp;Data processor is subject. The&nbsp;Data processor shall inform the&nbsp;Data&nbsp;controller&nbsp;of that legal requirement before the&nbsp;processing, unless&nbsp;Applicable Laws prohibit&nbsp;Data&nbsp;processor from providing this information.&nbsp;<\/li>\n\n\n\n<li>The&nbsp;Data processor&nbsp;shall immediately notify the&nbsp;Data controller if the&nbsp;Data&nbsp;processor&nbsp;cannot fulfil its obligations under this DPA or if the&nbsp;Data processor is of the view that an Instruction regarding the&nbsp;processing of personal data given by the&nbsp;Data controller would be in breach of Applicable Data Protection Laws, unless the&nbsp;Data processor is prohibited from notifying the&nbsp;Data controller under Applicable Laws. Notification shall be given by e-mail to the designated e-mail address set by the&nbsp;Data Controller in the&nbsp;Orderform.&nbsp;<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<ol start=\"4\" class=\"wp-block-list\">\n<li><strong><strong>Security&nbsp;measures&nbsp;etc.&nbsp;<\/strong><\/strong>\n<ul class=\"wp-block-list\">\n<li>The&nbsp;Data processor&nbsp;shall at its own cost implement&nbsp;appropriate technical&nbsp;and&nbsp;organizational&nbsp;measures to protect and safeguard the personal data that is processed against personal data breaches. The&nbsp;measures&nbsp;shall at least reach a level of security equivalent of what is prescribed by Applicable Data Protection Laws, relevant Supervisory Authorities&#8217; applicable regulations, guidelines&nbsp;regarding&nbsp;security of personal data, and what is otherwise&nbsp;appropriate to&nbsp;the risk of the processing of personal data. The minimum&nbsp;technical and organizational measures&nbsp;implemented by&nbsp;the Data processor&nbsp;are included in&nbsp;Schedule 2.&nbsp;<\/li>\n\n\n\n<li>The&nbsp;Data processor shall, taking into account the nature of the processing and the information available to the&nbsp;Data processor, assist the&nbsp;Data controller in ensuring compliance with its obligations under Articles 35 and 36 of the GDPR to carry out data protection impact assessments (DPIAs) and prior consultations with the relevant Supervisory Authority in relation to the processing of personal data covered by this DPA. Requests for such&nbsp;assistance&nbsp;shall be sent to the&nbsp;Data processor by e-mail to&nbsp;<a href=\"mailto:legal@quickchannel.com\" target=\"_blank\" rel=\"noreferrer noopener\">legal@quickchannel.com<\/a>.&nbsp;&nbsp;<\/li>\n\n\n\n<li>The&nbsp;Data processor shall ensure that access to the personal data is limited to personnel of the&nbsp;Data processor who need access to personal data&nbsp;in order for&nbsp;the&nbsp;Data processor to fulfil its obligations under this DPA. The&nbsp;Data&nbsp;processor&nbsp;shall ensure that the personnel only process personal data&nbsp;in accordance with&nbsp;Clause&nbsp;3.1&nbsp;above.&nbsp;<\/li>\n\n\n\n<li>The&nbsp;Data processor shall ensure that all employees authorized to access and process personal data covered by this DPA have committed themselves to confidentiality by ensuring that there are written confidentiality agreements in place with the personnel which covers personal data that the&nbsp;Data processor processes on behalf of the&nbsp;Data controller&nbsp;under this DPA.&nbsp;<\/li>\n\n\n\n<li>The&nbsp;Data processor shall allow for and contribute to audits, including inspections, conducted by the&nbsp;Data controller. The Parties agree that such inspections shall be carried out by a third-party auditor jointly appointed by the Parties which has committed itself to confidentiality.&nbsp;<\/li>\n\n\n\n<li>For the avoidance of doubt, any inspection or audit shall only comprise such information that is necessary in order for the&nbsp;Data controller to determine whether the&nbsp;Data&nbsp;processor&nbsp;fulfils its obligations under Article 28 of the GDPR and this DPA and shall not comprise any other information which is irrelevant to the&nbsp;Data processors&nbsp;processing of personal data under this DPA.&nbsp;<\/li>\n\n\n\n<li>The&nbsp;Data controller shall give the&nbsp;Data processor reasonable notice of at least one (1) month prior to exercising its audit rights&nbsp;in order to&nbsp;allow the Parties to plan the audit or inspection. A request for an audit or inspection shall be sent to the&nbsp;Data processor by e-mail to&nbsp;<a href=\"mailto:legal@quickchannel.com\" target=\"_blank\" rel=\"noreferrer noopener\">legal@quickchannel.com<\/a>.&nbsp;<\/li>\n\n\n\n<li>Each Party shall bear its own costs in relation to any such audit. Should an audit or inspection show that the&nbsp;Data processor has not fulfilled its obligations under this DPA or Applicable Data Protection Laws, the&nbsp;Data processor shall without undue delay remedy such issue at its own cost.&nbsp;<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<ol start=\"5\" class=\"wp-block-list\">\n<li><strong>Personal data breach notification<\/strong>\u00a0\n<ul class=\"wp-block-list\">\n<li>In the event of&nbsp;a personal data&nbsp;breach&nbsp;the&nbsp;Data processor shall notify the&nbsp;Data controller in writing without undue delay after becoming aware of the personal data breach. 3.11 Notification shall be given by e-mail to the designated e-mail address set by the&nbsp;Data controller in the&nbsp;Orderform.&nbsp;<\/li>\n\n\n\n<li>The&nbsp;Data processor shall assist the&nbsp;Data controller to the extent necessary in order to investigate the personal data breach and to enable the&nbsp;Data controller to fulfil its notification obligations, where applicable, to relevant Supervisory Authorities and data subjects concerned under Applicable Data Protection Laws. The&nbsp;Data processor shall therefore&nbsp;immediately&nbsp;after becoming aware of a personal data breach:&nbsp;<\/li>\n\n\n\n<li>commence an investigation of the personal data breach&nbsp;in order to&nbsp;determine&nbsp;the scope,&nbsp;nature&nbsp;and the&nbsp;likely consequences&nbsp;of the personal data breach;&nbsp;&nbsp;<\/li>\n\n\n\n<li>Take&nbsp;appropriate remedial&nbsp;measures&nbsp;in order to&nbsp;mitigate the possible adverse effects of the personal data breach; and&nbsp;consult&nbsp;with the&nbsp;Data controller&nbsp;in order to&nbsp;determine&nbsp;whether&nbsp;the&nbsp;Data controller&nbsp;would be&nbsp;obligated&nbsp;under Applicable Data Protection Laws to notify the relevant Supervisory Authority and or the data subjects concerned&nbsp;of&nbsp;the personal data breach.&nbsp; As soon as possible following the commencement of the investigation, the&nbsp;Data processor shall provide the following information to the&nbsp;Data controller as regards the personal data breach:&nbsp;<\/li>\n\n\n\n<li>a description of the nature of the personal data breach, including the categories and approximate number of data subjects concerned, and the categories and approximate number of personal data records concerned; the&nbsp;likely consequences&nbsp;of the personal data breach; and&nbsp;a description of the measures taken or proposed to be taken by&nbsp;Data processor&nbsp;to address the personal data breach, including, where&nbsp;appropriate, measures to mitigate its possible adverse effects.&nbsp;<\/li>\n\n\n\n<li>Where, and&nbsp;in so far as, it is not possible for the&nbsp;Data processor&nbsp;to provide the above information at the same time, the information may be provided in phases without undue further delay. Notification of the information in Clause&nbsp;5.2&nbsp;(iv)&nbsp;above shall be given by e-mail to the designated e-mail address set by the&nbsp;Data controller in the&nbsp;Orderform.&nbsp;&nbsp;<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<ol start=\"6\" class=\"wp-block-list\">\n<li><strong>Security measures etc.<\/strong>&nbsp;\n<ul class=\"wp-block-list\">\n<li>The Data processor shall at its own cost implement appropriate technical and organizational measures to protect and safeguard the personal data that is processed against personal data breaches. The measures shall at least reach a level of security equivalent of what is prescribed by Applicable Data Protection Laws, relevant Supervisory Authorities&#8217; applicable regulations, guidelines regarding security of personal data, and what is otherwise appropriate to the risk of the processing of personal data. The minimum technical and organizational measures implemented by the Data processor are included in Schedule 2.&nbsp;<\/li>\n\n\n\n<li>The Data processor shall, taking into account the nature of the processing and the information available to the Data processor, assist the Data controller in ensuring compliance with its obligations under Articles 35 and 36 of the GDPR to carry out data protection impact assessments (DPIAs) and prior consultations with the relevant Supervisory Authority in relation to the processing of personal data covered by this DPA. Requests for such assistance shall be sent to the Data processor by e-mail to <a href=\"mailto:legal@quickchannel.com\" target=\"_blank\" rel=\"noreferrer noopener\">legal@quickchannel.com<\/a>.&nbsp;&nbsp;<\/li>\n\n\n\n<li>The Data processor shall ensure that access to the personal data is limited to personnel of the Data processor who need access to personal data in order for the Data processor to fulfil its obligations under this DPA. The Data processor shall ensure that the personnel only process personal data in accordance with Clause 3.1 above.&nbsp;<\/li>\n\n\n\n<li>The Data processor shall ensure that all employees authorized to access and process personal data covered by this DPA have committed themselves to confidentiality by ensuring that there are written confidentiality agreements in place with the personnel which covers personal data that the Data processor processes on behalf of the Data controller under this DPA.&nbsp;<\/li>\n\n\n\n<li>The Data processor shall allow for and contribute to audits, including inspections, conducted by the Data controller. The Parties agree that such inspections shall be carried out by a third-party auditor jointly appointed by the Parties which has committed itself to confidentiality.&nbsp;<\/li>\n\n\n\n<li>For the avoidance of doubt, any inspection or audit shall only comprise such information that is necessary in order for the Data controller to determine whether the Data processor fulfils its obligations under Article 28 of the GDPR and this DPA and shall not comprise any other information which is irrelevant to the Data processors processing of personal data under this DPA.&nbsp;<\/li>\n\n\n\n<li>The Data controller shall give the Data processor reasonable notice of at least one (1) month prior to exercising its audit rights in order to allow the Parties to plan the audit or inspection. A request for an audit or inspection shall be sent to the Data processor by e-mail to <a href=\"mailto:legal@quickchannel.com\" target=\"_blank\" rel=\"noreferrer noopener\">legal@quickchannel.com<\/a>.&nbsp;<\/li>\n\n\n\n<li>Each Party shall bear its own costs in relation to any such audit. Should an audit or inspection show that the Data processor has not fulfilled its obligations under this DPA or Applicable Data Protection Laws, the Data processor shall without undue delay remedy such issue at its own cost.&nbsp;<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<ol start=\"7\" class=\"wp-block-list\">\n<li><strong>Personal data breach notification&nbsp;<\/strong>\n<ul class=\"wp-block-list\">\n<li>In the event of a personal data breach the Data processor shall notify the Data controller in writing without undue delay after becoming aware of the personal data breach. Notification shall be given by e-mail to the designated e-mail address set by the Data controller in the Orderform.&nbsp;<\/li>\n\n\n\n<li>The Data processor shall assist the Data controller to the extent necessary in order to investigate the personal data breach and to enable the Data controller to fulfil its notification obligations, where applicable, to relevant Supervisory Authorities and data subjects concerned under Applicable Data Protection Laws. The Data processor shall therefore immediately after becoming aware of a personal data breach:&nbsp;\n<ul class=\"wp-block-list\">\n<li>commence an investigation of the personal data breach in order to determine the scope, nature and the likely consequences of the personal data breach;&nbsp;&nbsp;<\/li>\n\n\n\n<li>take appropriate remedial measures in order to mitigate the possible adverse effects of the personal data breach; and&nbsp;<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Consult with the Data controller in order to determine as to whether the Data controller would be obligated under Applicable Data Protection Laws to notify the relevant Supervisory Authority and or the data subjects concerned of the personal data breach.&nbsp;\n<ul class=\"wp-block-list\">\n<li>As soon as possible following the commencement of the investigation, the Data processor shall provide the following information to the Data controller as regards the personal data breach:&nbsp;\n<ul class=\"wp-block-list\">\n<li>A description of the nature of the personal data breach including the categories and approximate number of data subjects concerned, and the categories and approximate number of personal data records concerned;&nbsp;<\/li>\n\n\n\n<li>The likely consequences of the personal data breach; and<\/li>\n\n\n\n<li>A description of the measures taken or proposed to be taken by Data processor to address the personal data breach, including, where appropriate, measures to mitigate its possible adverse effects.&nbsp;&nbsp;&nbsp;<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Where, and in so far as, it is not possible for the Data processor to provide the above information at the same time, the information may be provided in phases without undue further delay. Notification of the information in Clause 5.2 (iv) above shall be given by e-mail to the designated e-mail address set by the Data controller in the Orderform.&nbsp;&nbsp;<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<ol start=\"8\" class=\"wp-block-list\">\n<li><strong>Use of subprocessors&nbsp;<\/strong>\n<ul class=\"wp-block-list\">\n<li>The&nbsp;Data controller hereby gives the&nbsp;Data processor a general written authorization to engage&nbsp;Subprocessors,&nbsp;named in appendix&nbsp;Subprocessors,&nbsp;which are necessary to provide the Services.&nbsp;Data processor shall prior to engaging a new (or replacing an existing)&nbsp;Subprocessor&nbsp;which will process personal data on behalf of the&nbsp;Data controller:&nbsp;\n<ul class=\"wp-block-list\">\n<li>i. Carry out an adequate due diligence to ensure that the Subprocessor is capable of providing sufficient guarantees with respect of compliance with Applicable Data Protection Laws;&nbsp;&nbsp;<\/li>\n\n\n\n<li>ii. Ensure that there is a written data processing agreement with the Subprocessor which imposes obligations on the Subprocessor which fulfils the requirements of Article 28(3) of the GDPR, upon which the Data processor may enter into such data processing agreement directly with the Subprocessor;&nbsp;<\/li>\n\n\n\n<li>iii. Where the Subprocessor will process personal data in a Third Country ensure that the requirements of Clause 8 of this DPA are fulfilled.&nbsp;<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>carry out an adequate due diligence to ensure that the&nbsp;Subprocessor&nbsp;is capable of providing&nbsp;sufficient guarantees with respect of compliance with Applicable Data Protection Laws;&nbsp;&nbsp;<\/li>\n\n\n\n<li>ensure that there is a written data processing agreement with the&nbsp;Subprocessor&nbsp;which imposes obligations on the&nbsp;Subprocessor&nbsp;which fulfils the requirements of Article 28(3) of the GDPR, upon which the&nbsp;Data processor may enter into such data processing agreement directly with the&nbsp;Subprocessor;&nbsp;<\/li>\n\n\n\n<li>where&nbsp;the&nbsp;Subprocessor&nbsp;will process personal data in a Third&nbsp;Country&nbsp;ensure that the requirements of Clause 8 of this DPA are fulfilled.&nbsp;<\/li>\n\n\n\n<li>The&nbsp;Data processor&nbsp;maintains&nbsp;a list of all&nbsp;Subprocessors&nbsp;which&nbsp;Data processor has engaged from time to time. The list is available on www.quickchannel.com\/en\/gdpr. The list includes at least the following information in relation to each&nbsp;Subprocessor:&nbsp;<\/li>\n\n\n\n<li>the identity of the&nbsp;Subprocessor&nbsp;(including full legal name, corporate registration&nbsp;number&nbsp;and address);&nbsp;<\/li>\n\n\n\n<li>the type(s) of service(s) provided by the&nbsp;Subprocessor;&nbsp;&nbsp;<\/li>\n\n\n\n<li>the location where the&nbsp;Subprocessor&nbsp;will process personal data on behalf of the&nbsp;Data processor;&nbsp;&nbsp;<\/li>\n\n\n\n<li>information on the measures (or where information on such measures may be found) that the&nbsp;Subprocessor&nbsp;has taken to protect the personal data.&nbsp;<\/li>\n\n\n\n<li>The&nbsp;Data processor shall&nbsp;prior&nbsp;to engaging a new&nbsp;Subprocessor&nbsp;notify the&nbsp;Data controller&nbsp;of this by e-mail to the designated e-mail address set by the&nbsp;Data&nbsp;controller&nbsp;in the&nbsp;Orderform.&nbsp;<\/li>\n\n\n\n<li>If, within thirty (30) days of such notice, the&nbsp;Data controller notifies the&nbsp;Data processor&nbsp;in writing of any objections to the appointment, the&nbsp;Data processor and the&nbsp;Data controller shall seek to agree on a solution which is acceptable to Parties concerned. If the Parties do not agree on a solution within thirty (30) days following the&nbsp;Data controller&#8217;s written objection, or at such later time (which the Parties have agreed on in writing) and it is not possible for&nbsp;Data processor to provide the Services without the&nbsp;Subprocessor, the&nbsp;Data controller shall have a right to terminate the Subscription Agreement in advance to end following the thirty (30) days&#8217; period.&nbsp;&nbsp;<\/li>\n\n\n\n<li>Upon the&nbsp;Data controller&#8217;s request and without undue delay the&nbsp;Data processor shall provide a copy of the data processing agreement that the&nbsp;Data processor has&nbsp;entered into&nbsp;with the&nbsp;Subprocessor. The&nbsp;Data processor shall, however, have a right to&nbsp;delete&nbsp;or remove commercial information from such data processing agreement prior to&nbsp;disclosing&nbsp;the agreement to the&nbsp;Data controller. Such a request shall be sent to&nbsp;Data&nbsp;processor by e-mail to&nbsp;<a href=\"mailto:legal@quickchannel.com\" target=\"_blank\" rel=\"noreferrer noopener\">legal@quickchannel.com<\/a>.&nbsp;&nbsp;<\/li>\n\n\n\n<li>Where a&nbsp;Subprocessor&nbsp;fails to&nbsp;fulfil its data protection obligations, the&nbsp;Data processor shall remain fully liable to the&nbsp;Data controller for the performance of the&nbsp;Subprocessor&#8217;s&nbsp;obligations.&nbsp;&nbsp;<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<ol start=\"9\" class=\"wp-block-list\">\n<li><strong>Confidentiality of personal data&nbsp;<\/strong>\n<ul class=\"wp-block-list\">\n<li>Without prejudice to the confidentiality undertaking in Clause 9 in the General Terms and Conditions, the Data processor shall keep and maintain all personal data in strict secrecy and not disclose or make available the personal data to a third party, unless otherwise authorized in advance in writing by the Data controller or otherwise required by Applicable Laws or for the performance of this DPA.&nbsp;&nbsp;<\/li>\n\n\n\n<li>The Data processor agrees that this confidentiality undertaking shall survive the termination of this DPA and continue to apply until all personal data have been returned or (upon the Data controller&#8217;s written request) have been deleted or anonymized in a secure and irreversible way in accordance with Clause 9 below.&nbsp;<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<ol start=\"10\" class=\"wp-block-list\">\n<li><strong>Data subject requests&nbsp;<\/strong>\n<ul class=\"wp-block-list\">\n<li>The Data processor shall, insofar as this is possible, assist the Data controller by taking appropriate measures for the fulfillment of the Data controller&#8217;s obligation to respond to Data Subject Requests.&nbsp;<\/li>\n\n\n\n<li>The Data processor shall forward any Data Subject Request concerning personal data covered by this DPA to the Data controller. Notification shall be given by e-mail to the designated e-mail address set by the Data controller in the Orderform.&nbsp;&nbsp;<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<ol start=\"11\" class=\"wp-block-list\">\n<li><strong>Return of personal data&nbsp;<\/strong>\n<ul class=\"wp-block-list\">\n<li>Upon termination of the Subscription Agreement, the&nbsp;Data controller&nbsp;shall instruct&nbsp;the&nbsp;Data&nbsp;processor&nbsp;in writing whether the personal data the Data processor&nbsp;(or a&nbsp;Subprocessor) processes on behalf of the&nbsp;Data controller shall (i)&nbsp;Data controller download the data or (ii) be deleted in a secure and irreversible way. If the&nbsp;Data controller&nbsp;does not provide such instruction within sixty (60) days following the termination of the Subscription Agreement, the&nbsp;Data processor shall&nbsp;delete&nbsp;any personal data covered by this DPA and in&nbsp;the&nbsp;Data processor\u2019s&nbsp;possession without undue delay. The Instruction shall be given to&nbsp;Data&nbsp;processor&nbsp;by e-mail to&nbsp;<a href=\"mailto:legal@quickchannel.com\" target=\"_blank\" rel=\"noreferrer noopener\">legal@quickchannel.com<\/a>.&nbsp;<\/li>\n\n\n\n<li>The obligations under Clause 9.1 above do not apply if the&nbsp;Data processor is required under Applicable Laws to continue to store the personal data.&nbsp;<\/li>\n\n\n\n<li>The&nbsp;Data processor shall, upon the&nbsp;Data controller&#8217;s request, provide a written notice as regards the measures taken by the&nbsp;Data processor to&nbsp;comply with&nbsp;its obligations under this Clause&nbsp;9. Notification shall be given by e-mail to the designated e-mail address set by the&nbsp;Data controller in the&nbsp;Orderform.&nbsp;&nbsp;<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<ol start=\"12\" class=\"wp-block-list\">\n<li><strong>Personal data transfers&nbsp;<\/strong>\n<ul class=\"wp-block-list\">\n<li>The Data processor shall ensure that personal data covered by this DPA will be processed and stored within the EU\/EEA (including by Subprocessors engaged by the Data processor, unless the Parties agree otherwise.&nbsp;<\/li>\n\n\n\n<li>The Data processor is only entitled to transfer personal data covered by this DPA to a Third Country if the Data controller has given its prior written authorization or if they are chosen in the Orderform and listed in this agreement in appendix Subprocessors and such transfer fulfills the requirements under Applicable Data Protection Laws.&nbsp;&nbsp;<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<ol start=\"13\" class=\"wp-block-list\">\n<li><strong>Request from supervisory authority&nbsp;<\/strong>\n<ul class=\"wp-block-list\">\n<li>In case a Supervisory Authority requests:&nbsp;\n<ul class=\"wp-block-list\">\n<li>i. Information from the Data processor regarding its processing of personal data under this DPA; or&nbsp;<\/li>\n\n\n\n<li>ii. That the Data processor shall disclose personal data that the Data processor processes on behalf of the Data controller under this DPA,&nbsp;<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>The Data processor shall without undue delay notify the Data controller thereof. Notification shall be given by e-mail to the designated e-mail address set by the Data controller in the Orderform. The Parties shall thereafter consult regarding the Supervisory Authority&#8217;s request. The Data processor\u2019s obligations do not apply if the Data processor is prohibited under Applicable Laws to notify or consult with the Data controller. The Data processor may not act on the Data controller&#8217;s behalf as agent for the Data controller or otherwise.&nbsp;<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<ol start=\"14\" class=\"wp-block-list\">\n<li><strong>Liability&nbsp;<\/strong>\n<ul class=\"wp-block-list\">\n<li>Each Party shall be liable for any administrative fines imposed on the Party in question due to the Party&#8217;s failure fulfils its obligation under this DPA or Applicable Data Protection Laws or otherwise has processed personal data in breach of Applicable Data Protection Laws.&nbsp;<\/li>\n\n\n\n<li>Liability for any claims for damages from data subjects concerned shall be governed by Article 82 of the GDPR.&nbsp;<\/li>\n\n\n\n<li>With prejudice to Clauses 12.1 and 12.2 above, the limitation of liability included in the Subscription Agreement shall apply. The limitation of liability is, however, not applicable with respect to damages which arise in connection with breach of Clause 7 (<em>Confidentiality of Personal Data<\/em>).&nbsp;&nbsp;&nbsp;<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<ol start=\"15\" class=\"wp-block-list\">\n<li><strong>Term and termination<\/strong>\n<ul class=\"wp-block-list\">\n<li>This DPA enters into effect on the Start Date and applies for as long as the&nbsp;Data processor (or a&nbsp;Subprocessor&nbsp;engaged by the&nbsp;Data processor) processes personal data on behalf of the&nbsp;Data controller.&nbsp;&nbsp;<\/li>\n\n\n\n<li>The DPA will automatically&nbsp;terminate&nbsp;if:&nbsp;<\/li>\n\n\n\n<li>a Party commits a material breach of any term of this DPA and\/or&nbsp;substantially fails&nbsp;to fulfil its obligations under this DPA and&nbsp;fails to&nbsp;remedy such breach and\/or failure within thirty (30) days following a written notice from the other party of the breach; or&nbsp;<\/li>\n\n\n\n<li>the other party is declared bankrupt, is subject to corporate reorganization,&nbsp;commence&nbsp;composition proceedings, goes into liquidation or otherwise can be assumed to have become insolvent.&nbsp;&nbsp;<\/li>\n\n\n\n<li>Clause&nbsp;7&nbsp;(<em>Confidentiality of Personal Data<\/em>), Clause&nbsp;9&nbsp;(<em>Return of Personal Data<\/em>), Clause&nbsp;12&nbsp;(<em>Liability<\/em>), and Clause&nbsp;14&nbsp;(<em>Miscellaneous<\/em>) shall survive the termination of this DPA for any reason.&nbsp;&nbsp;&nbsp;<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<ol start=\"16\" class=\"wp-block-list\">\n<li><strong>Miscellaneous&nbsp;<\/strong>\n<ul class=\"wp-block-list\">\n<li>The DPA and its appendices&nbsp;constitute&nbsp;the entire agreement between the Parties on all matters to which the DPA relates.&nbsp;<\/li>\n\n\n\n<li>Neither the rights nor the obligations of either party under this DPA may be assigned in whole or in part without the prior written consent of the other Party.&nbsp;<\/li>\n\n\n\n<li>This DPA shall be governed by Swedish law.&nbsp;<\/li>\n\n\n\n<li>Clause&nbsp;14.7&nbsp;in the General Terms and Conditions shall apply with respect to any dispute, controversy or claim arising out of or relating to this DPA, or the breach,&nbsp;termination&nbsp;or validity&nbsp;thereof.&nbsp;<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Schedule 1 to DPA \u2013 Instruction regarding the processing of personal data for the provision of the Services<\/strong>&nbsp;<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This Schedule 1 sets out the Data controller&#8217;s Instruction with respect to the Data processor&#8217;s (and its Subprocessors) processing of personal data in connection with provision of the Services.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Purposes of the processing<\/strong>&nbsp;<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The&nbsp;Data processor&nbsp;will process personal data for the purposes of providing, managing,&nbsp;developing&nbsp;and improving the Services&nbsp;in order to&nbsp;allow the&nbsp;Data controller and the Users to use the Services and to fulfil its obligations under this DPA and Applicable Data Protection Laws.&nbsp;&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Specifically, the&nbsp;Data&nbsp;processor&nbsp;shall process personal data on behalf of the&nbsp;Data controller to:&nbsp;<\/p>\n\n\n\n<ul start=\"5\" class=\"wp-block-list\">\n<li>Create, edit, manage,&nbsp;store&nbsp;and distribute online video, communication and content using the Services,&nbsp;<\/li>\n<\/ul>\n\n\n\n<ul start=\"6\" class=\"wp-block-list\">\n<li>Enable User interactions on the Services,&nbsp;<\/li>\n<\/ul>\n\n\n\n<ul start=\"7\" class=\"wp-block-list\">\n<li>Share online video, communication and content using the Services,&nbsp;<\/li>\n<\/ul>\n\n\n\n<ul start=\"8\" class=\"wp-block-list\">\n<li>Analyse&nbsp;the use of the Services,&nbsp;<\/li>\n<\/ul>\n\n\n\n<ul start=\"9\" class=\"wp-block-list\">\n<li>Manage access to the Services,&nbsp;<\/li>\n<\/ul>\n\n\n\n<ul start=\"10\" class=\"wp-block-list\">\n<li>Communicate with Users&nbsp;regarding&nbsp;the Services,&nbsp;<\/li>\n<\/ul>\n\n\n\n<ul start=\"11\" class=\"wp-block-list\">\n<li>Provide support and respond to questions&nbsp;regarding&nbsp;the Services,&nbsp;<\/li>\n<\/ul>\n\n\n\n<ul start=\"12\" class=\"wp-block-list\">\n<li>Develop and improve the Services, and&nbsp;<\/li>\n<\/ul>\n\n\n\n<ul start=\"13\" class=\"wp-block-list\">\n<li>Ensure technical functionality and security of the Services.&nbsp;<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Description of the Processing of Personal Data<\/strong>&nbsp;<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Create, edit, manage, store and distribute online video, communication and content using the Services<\/strong>&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Personal data is processed when content, including online video and communication, is created, edited, managed, stored, and distributed using the Services.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><em>Categories of data subjects<\/em>&nbsp;<\/td><td><em>Categories of personal data<\/em>&nbsp;<\/td><\/tr><tr><td>&#8211; Users&nbsp;<br>&#8211; Participants&nbsp;&nbsp;<\/td><td>&#8211; Contact information&nbsp;<br>&#8211; Content&nbsp;<br>&#8211; Identification information<br>&#8211; Profile information&nbsp;<br>&#8211; Technical information&nbsp;<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Enable User interactions on the Services<\/strong>&nbsp;<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Personal data is processed when Users interact on the Services, for example in chats, polls, and using voting functionality in the Services.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><em>Categories of data subjects<\/em>&nbsp;<\/td><td><em>Categories of personal data<\/em>&nbsp;<\/td><\/tr><tr><td>&#8211; Users&nbsp;<br>&#8211; Participants&nbsp;<\/td><td>&#8211; Contact information&nbsp;<br>&#8211; Content&nbsp;<br>&#8211; Identification information&nbsp;<br>&#8211; Profile information&nbsp;<br>&#8211; Technical information&nbsp;<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Share online video, communication and content using the Services<\/strong>&nbsp;<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Personal data is processed when content, including online video and communication, is shared by using the Services, for example when using integrations or the APIs.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><em>Categories of data subjects<\/em>&nbsp;<\/td><td><em>Categories of personal data<\/em>&nbsp;<\/td><\/tr><tr><td>&#8211; Users&nbsp;<br>&#8211; Participants&nbsp;<\/td><td>&#8211; Contact information&nbsp;<br>&#8211; Content&nbsp;<br>&#8211; Identification information&nbsp;<br>&#8211; Profile information&nbsp;<br>&#8211; Technical information<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Analyse the use of the Services<\/strong>&nbsp;<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Personal data is processed when analyzing the use of the Services, for example to generate statistics and reports of meetings, streams, attendance etc.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><em>Categories of data subjects<\/em>&nbsp;<\/td><td><em>Categories of personal data<\/em>&nbsp;<\/td><\/tr><tr><td>&#8211; Users<br>&#8211; Participants<br>&#8211; Video consumers&nbsp;<\/td><td>&#8211; Contact information&nbsp;<br>&#8211; Content&nbsp;<br>&#8211; Identification information<br>&#8211; Profile information<br>&#8211; Technical information<br>&#8211; User generated information&nbsp;<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Manage access to the Services<\/strong>&nbsp;<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Personal data is processed when managing access to the Services, for example when creating user accounts or granting access to the Service for Users.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><em>Categories of data subjects<\/em>&nbsp;<\/td><td><em>Categories of personal data<\/em>&nbsp;<\/td><\/tr><tr><td>&#8211; Users&nbsp;<\/td><td>&#8211; Contact information&nbsp;<br>&#8211; Identification information&nbsp;<br>&#8211; Profile information&nbsp;<br>&#8211; Technical information&nbsp;<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Communicate with Users regarding the Services<\/strong>&nbsp;<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Personal data is processed when communicating with Users regarding the Services, for example to send information regarding meetings, content, updates to the Services or maintenance and incidents.&nbsp;&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><em>Categories of data subjects<\/em>&nbsp;<\/td><td><em>Categories of personal data<\/em>&nbsp;<\/td><\/tr><tr><td>&#8211; Users&nbsp;<\/td><td>&#8211; Contact information&nbsp;<br>&#8211; Content&nbsp;<br>&#8211; Identification information&nbsp;<br>&#8211; Profile information&nbsp;<br>&#8211; Technical information&nbsp;<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Provide support and respond to questions regarding the Services<\/strong>&nbsp;<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Personal data is processed to provide support and respond to questions regarding the Services, for example to register the support matter, carry out troubleshooting and to communicate for the same purpose.&nbsp;&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><em>Categories of data subjects<\/em>&nbsp;<\/td><td><em>Categories of personal data<\/em>&nbsp;<\/td><\/tr><tr><td>&#8211; Users&nbsp;<br>&#8211; Contact persons of the&nbsp;Data controller&nbsp;<\/td><td>&#8211; Contact information&nbsp;<br>&#8211; Content<br>&#8211; Identification information&nbsp;<br>&#8211; Profile information&nbsp;<br>&#8211; Technical information&nbsp;<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Develop and improve the Services<\/strong>&nbsp;<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Personal data is processed to develop and improve the Services, for example to anonymize personal data for the same purpose, to test and develop functionality and to verify software fixes.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><em>Categories of data subjects<\/em>&nbsp;<\/td><td><em>Categories of personal data<\/em>&nbsp;<\/td><\/tr><tr><td>&#8211; Users&nbsp;<\/td><td>&#8211; Content&nbsp;<br>&#8211; Identification information&nbsp;<br>&#8211; Profile information&nbsp;<br>&#8211; Technical information&nbsp;<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Ensure technical functionality and security of the Services<\/strong>&nbsp;<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Personal data is processed to ensure the technical functionality and security of the Services, for&nbsp;example for&nbsp;security logging, error handling, and backups.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><em>Categories of data subjects<\/em>&nbsp;<\/td><td><em>Categories of personal data<\/em>&nbsp;<\/td><\/tr><tr><td>All concerned categories of data subjects, including users, contact persons of the&nbsp;Data controller, video&nbsp;consumers&nbsp;and participants&nbsp;<\/td><td>12.69. All relevant categories of personal data above&nbsp;<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">For information on all processing of personal data and current storage times please contact <a href=\"mailto:legal@quickchannel.com\" target=\"_blank\" rel=\"noreferrer noopener\">legal@quickchannel.com<\/a>.&nbsp;&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Place of processing<\/strong>&nbsp;<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Information on which&nbsp;Subprocessors&nbsp;the&nbsp;Data processor has contracted and where they process the personal data&nbsp;can be found below.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Sub processors<\/strong>&nbsp;<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Accepted mandatory sub processors:&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Subprocessor<\/strong>&nbsp;<\/td><td><strong>Purpose<\/strong>&nbsp;<\/td><td><strong>Location of processing<\/strong>&nbsp;<\/td><\/tr><tr><td>OVH Groupe SAS&nbsp;<br>www.ovh.ie&nbsp;<br>Address: 2 rue Kellermann,&nbsp;<br>59100 Roubaix, France.&nbsp;<\/td><td>Cloud service provider.\u202f&nbsp;<br>Used for storage of media files, Live Events, Videosite and Storage of encrypted backups.&nbsp;<br>Optionally used for CDN services.&nbsp;<\/td><td>EU&nbsp;<\/td><\/tr><tr><td>Copernica B.V.&nbsp;<br>www.copernica.com&nbsp;<br>Address: De Ruijterkade 112,&nbsp;<br>1011 AB, Amsterdam, Netherlands.&nbsp;<\/td><td>Mail Service Provider&nbsp;<br>Used for automatic emails such as reset password or webinar invites and other communication with the service.&nbsp;<\/td><td>Netherlands&nbsp;<\/td><\/tr><tr><td>TRANSPARENT EDGE SERVICES, S.L.&nbsp;<br>www.transparentedge.eu&nbsp;<br>B85363141&nbsp;<br>Address: Calle&nbsp;Cedaceros&nbsp;11, 6\u00baC,&nbsp;<br>28014 (Madrid) Spain<\/td><td>EU&nbsp;subprocessor&nbsp;providing&nbsp;<br>CDN distribution&nbsp;<\/td><td>EU<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Accepted sub&nbsp;processors&nbsp;in addition to the mandatory sub&nbsp;processors&nbsp;are&nbsp;decided in the Order form by one of the&nbsp;choices \u201dEU&nbsp;Only\u201d&nbsp;or \u201dGlobal\u201d.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">With&nbsp;EU Only in the&nbsp;Orderform&nbsp;no&nbsp;additional&nbsp;subprocessors&nbsp;are included&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">With&nbsp;Global in&nbsp;Orderform&nbsp;the following sub processors are included:&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Subprocessor<\/strong>&nbsp;<\/td><td><strong>Purpose<\/strong>&nbsp;<\/td><td><strong>Location of processing<\/strong>&nbsp;<\/td><\/tr><tr><td>Amazon Web Services, Inc.&nbsp;<br>aws.amazon.com&nbsp;<br>Address: 38 avenue John F. Kennedy,&nbsp;<br>L-1855 Luxembourg.&nbsp;<\/td><td>Optional&nbsp;subprocessor&nbsp;providing&nbsp;<br>CDN distribution, Storage and Live streaming.&nbsp;<\/td><td>Storage -Sweden, Ireland&nbsp;<br>CDN and Live &#8211; Worldwide&nbsp;<\/td><\/tr><tr><td>Microsoft Corporation&nbsp;<br>www.microsoft.com&nbsp;<br>Address:&nbsp;Regeringsgatan&nbsp;25, 111 53,&nbsp;<br>Stockholm, Sweden.&nbsp;<\/td><td>Optional&nbsp;subprocessor&nbsp;providing&nbsp;<br>Integrations to&nbsp;AzureAD&nbsp;and&nbsp;Sharepoint.&nbsp;<\/td><td>Ireland, Netherlands&nbsp;<\/td><\/tr><tr><td>Google Ireland Limited&nbsp;<br>www.google.com&nbsp;<br>Reg.no. 368047&nbsp;<br>Address: Gordon House, Barrow Street, Dublin 4, Ireland&nbsp;<\/td><td>Optional&nbsp;subprocessor&nbsp;providing:&nbsp;<br>Login via Ouath2; or speech-to-text transcription; or\u202f&nbsp;<br>Translation;&nbsp;or;&nbsp;Analytics integration; or Ads integration; or Chromecast functionality.<\/td><td>Worldwide (distributed in EU\/EEA and USA).&nbsp;<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Information about which sub processors that the&nbsp;Data processor&nbsp;has from time to time can be found here&nbsp;https:\/\/quickchannel.com\/en\/gdpr\/&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Changes to this instruction<\/strong>&nbsp;<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Parties agree that this Instruction may be updated from time to time in order to reflect the processing of personal data carried out by the Data processor (and its Subprocessors) in connection with the provision of the Services.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Schedule 2<\/strong>&nbsp;<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">See appendix Security at Quickchannel.&nbsp;<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>&#8221;Applicable Data Protection Laws&#8221;&nbsp; means the GDPR and all data protection legislation and regulations, including regulations issued by relevant Supervisory [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"disabled","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"class_list":["post-487","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Quickchannel Data Processing Agreement - Quickchannel<\/title>\n<meta name=\"description\" content=\"Quickchannel Data Processing Agreement\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/quickchannel.com\/fi\/dpa\/\" \/>\n<meta property=\"og:locale\" content=\"fi_FI\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Quickchannel Data Processing Agreement - Quickchannel\" \/>\n<meta property=\"og:description\" content=\"Quickchannel Data Processing Agreement\" \/>\n<meta property=\"og:url\" content=\"https:\/\/quickchannel.com\/fi\/dpa\/\" \/>\n<meta property=\"og:site_name\" content=\"Quickchannel\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/61567385758463\" \/>\n<meta property=\"article:modified_time\" content=\"2026-06-15T10:56:51+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Arvioitu lukuaika\" \/>\n\t<meta name=\"twitter:data1\" content=\"23 minuuttia\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/quickchannel.com\\\/fi\\\/dpa\\\/\",\"url\":\"https:\\\/\\\/quickchannel.com\\\/fi\\\/dpa\\\/\",\"name\":\"Quickchannel Data Processing Agreement - Quickchannel\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/quickchannel.com\\\/fi\\\/#website\"},\"datePublished\":\"2024-07-08T11:57:49+00:00\",\"dateModified\":\"2026-06-15T10:56:51+00:00\",\"description\":\"Quickchannel Data Processing Agreement\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/quickchannel.com\\\/fi\\\/dpa\\\/#breadcrumb\"},\"inLanguage\":\"fi\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/quickchannel.com\\\/fi\\\/dpa\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/quickchannel.com\\\/fi\\\/dpa\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/quickchannel.com\\\/fi\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Quickchannel Data Processing Agreement\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/quickchannel.com\\\/fi\\\/#website\",\"url\":\"https:\\\/\\\/quickchannel.com\\\/fi\\\/\",\"name\":\"Quickchannel\",\"description\":\"All you need for video creation, management, and sharing \u2013 whether on-demand or live \u2013 all within one end-to-end platform.\",\"publisher\":{\"@id\":\"https:\\\/\\\/quickchannel.com\\\/fi\\\/#organization\"},\"alternateName\":\"QC\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/quickchannel.com\\\/fi\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fi\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/quickchannel.com\\\/fi\\\/#organization\",\"name\":\"Quickchannel\",\"url\":\"https:\\\/\\\/quickchannel.com\\\/fi\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fi\",\"@id\":\"https:\\\/\\\/quickchannel.com\\\/fi\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"\\\/wp-content\\\/uploads\\\/2024\\\/07\\\/qc-logo-black-horisontal-no-slogan-scaled.webp\",\"contentUrl\":\"\\\/wp-content\\\/uploads\\\/2024\\\/07\\\/qc-logo-black-horisontal-no-slogan-scaled.webp\",\"width\":2560,\"height\":330,\"caption\":\"Quickchannel\"},\"image\":{\"@id\":\"https:\\\/\\\/quickchannel.com\\\/fi\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/61567385758463\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/quickchannel-ab\",\"https:\\\/\\\/www.youtube.com\\\/@quickchannelab\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Quickchannel Data Processing Agreement - Quickchannel","description":"Quickchannel Data Processing Agreement","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/quickchannel.com\/fi\/dpa\/","og_locale":"fi_FI","og_type":"article","og_title":"Quickchannel Data Processing Agreement - Quickchannel","og_description":"Quickchannel Data Processing Agreement","og_url":"https:\/\/quickchannel.com\/fi\/dpa\/","og_site_name":"Quickchannel","article_publisher":"https:\/\/www.facebook.com\/61567385758463","article_modified_time":"2026-06-15T10:56:51+00:00","twitter_card":"summary_large_image","twitter_misc":{"Arvioitu lukuaika":"23 minuuttia"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/quickchannel.com\/fi\/dpa\/","url":"https:\/\/quickchannel.com\/fi\/dpa\/","name":"Quickchannel Data Processing Agreement - Quickchannel","isPartOf":{"@id":"https:\/\/quickchannel.com\/fi\/#website"},"datePublished":"2024-07-08T11:57:49+00:00","dateModified":"2026-06-15T10:56:51+00:00","description":"Quickchannel Data Processing Agreement","breadcrumb":{"@id":"https:\/\/quickchannel.com\/fi\/dpa\/#breadcrumb"},"inLanguage":"fi","potentialAction":[{"@type":"ReadAction","target":["https:\/\/quickchannel.com\/fi\/dpa\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/quickchannel.com\/fi\/dpa\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/quickchannel.com\/fi\/"},{"@type":"ListItem","position":2,"name":"Quickchannel Data Processing Agreement"}]},{"@type":"WebSite","@id":"https:\/\/quickchannel.com\/fi\/#website","url":"https:\/\/quickchannel.com\/fi\/","name":"Quickchannel","description":"All you need for video creation, management, and sharing \u2013 whether on-demand or live \u2013 all within one end-to-end platform.","publisher":{"@id":"https:\/\/quickchannel.com\/fi\/#organization"},"alternateName":"QC","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/quickchannel.com\/fi\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fi"},{"@type":"Organization","@id":"https:\/\/quickchannel.com\/fi\/#organization","name":"Quickchannel","url":"https:\/\/quickchannel.com\/fi\/","logo":{"@type":"ImageObject","inLanguage":"fi","@id":"https:\/\/quickchannel.com\/fi\/#\/schema\/logo\/image\/","url":"\/wp-content\/uploads\/2024\/07\/qc-logo-black-horisontal-no-slogan-scaled.webp","contentUrl":"\/wp-content\/uploads\/2024\/07\/qc-logo-black-horisontal-no-slogan-scaled.webp","width":2560,"height":330,"caption":"Quickchannel"},"image":{"@id":"https:\/\/quickchannel.com\/fi\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/61567385758463","https:\/\/www.linkedin.com\/company\/quickchannel-ab","https:\/\/www.youtube.com\/@quickchannelab"]}]}},"_links":{"self":[{"href":"https:\/\/quickchannel.com\/fi\/wp-json\/wp\/v2\/pages\/487","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/quickchannel.com\/fi\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/quickchannel.com\/fi\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/quickchannel.com\/fi\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/quickchannel.com\/fi\/wp-json\/wp\/v2\/comments?post=487"}],"version-history":[{"count":25,"href":"https:\/\/quickchannel.com\/fi\/wp-json\/wp\/v2\/pages\/487\/revisions"}],"predecessor-version":[{"id":23820,"href":"https:\/\/quickchannel.com\/fi\/wp-json\/wp\/v2\/pages\/487\/revisions\/23820"}],"wp:attachment":[{"href":"https:\/\/quickchannel.com\/fi\/wp-json\/wp\/v2\/media?parent=487"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}