Skillramp

The Data Processing Addendum (DPA)

Version updated to 1.2

The Data Processing Addendum (DPA) is a supplementary agreement to the main contract between Skillramp and its customers. This document sets forth the terms and conditions under which personal data will be processed in compliance with applicable data protection laws, such as the General Data Protection Regulation (GDPR) in the European Union.

  1. Definitions

    • Personal Data : Any information relating to an identified or identifiable natural person.

    • Data Controller : The entity that determines the purposes and means of the processing of personal data.

    • Data Processor : The entity that processes personal data on behalf of the data controller.

  2. Obligations Of The Processor

    • Controller's Instructions : Process personal data only in accordance with the documented instructions of the data controller.

    • Security : Implement appropriate technical and organizational measures to protect personal data.

  3. Data Subject Rights

    Assist the data controller in fulfilling its obligations to respond to data subjects' requests to exercise their rights under data protection laws.

  4. Notification Of Security Incidents

    Notify the data controller without undue delay after becoming aware of a security incident affecting personal data.

  5. Return And Deletion Of Data

    Upon termination of the main contract, return or delete, at the choice of the data controller, all personal data processed, unless retention is required by law.