This Data Processing Addendum ("DPA") forms part of the Master Subscription Agreement between Hypercore and Customer. It applies where Hypercore processes personal data on Customer's behalf in providing the Services.
Capitalized terms not defined in this DPA have the meanings given in the MSA. "Personal Data" means any information relating to an identified or identifiable natural person that Hypercore processes on Customer's behalf.
Customer is the controller and Hypercore is the processor. Hypercore will process Personal Data only on Customer's documented instructions, including those set out in the MSA.
Customer authorizes Hypercore to engage subprocessors. Hypercore will give notice of new subprocessors and remains responsible for their performance.
Hypercore will implement appropriate technical and organizational measures to protect Personal Data.
Hypercore will assist Customer in responding to requests from data subjects to exercise their rights.
Hypercore will notify Customer without undue delay after becoming aware of a Personal Data breach.
Hypercore will make available the information reasonably necessary to demonstrate compliance with this DPA.
Where Personal Data is transferred internationally, the parties will rely on an appropriate transfer mechanism.
On termination of the Services, Hypercore will delete or return Personal Data at Customer's choice, unless retention is required by law.
