Zapworks

Data Processing Addendum

Add Comment

Your choice regarding cookies on this siteWe use cookies to optimise site functionality and give you the best possible experience.Accept all cookiesUse essential cookies onlySettings <ul> <li>Zappar</li> <li>Zapworks</li> <li>Zapbox</li> <li>Blog</li> <li>Contact Us</li> </ul> <ul> <li> Products Create Unleash your creativity with our suite of tools and SDKs. <ul> <li> Zapworks Designer Quickly create amazing AR experiences with our drag and drop tool. </li> <li> Mattercraft The next generation of 3D web tooling for the web, including AR, VR and WebXR. </li> </ul> <ul> <li> Zapworks Studio Create fully-customizable AR experiences with our most feature-rich tool. </li> <li> Universal AR SDK AR SDKs for Three.js, Unity, A-Frame, PlayCanvas, Babylon.js, JavaScript and React-Three.js. </li> </ul> Publish Distribute your content to the web or native applications. <ul> <li> WebAR Scan and enjoy Zapworks content in the browser, without downloading an app. </li> <li> WebXR Create immersive web based XR experiences for smartphone devices and VR headsets. </li> </ul> <ul> <li> AR Web Embed (NEW) Visualise and interact with content on your website with our intuitive AR Web Embed. </li> </ul> Learn Upskill your AR knowledge with bespoke training. <ul> <li> Zapworks Training Takes your team from a standing start and equips them with the skills they need. </li> <li> No Code AR Training Hands on no code AR training with Zapworks Designer. </li> </ul> <ul> <li> Advanced AR Training Comprehensive end-to-end AR training with Zapworks Studio. </li> <li> L&D AR Training Facilitator driven L&D AR training with Zapworks, specifically created for L&D teams. </li> </ul> </li> <li> Zapworks for <ul> <li> Enterprise Join the world’s most innovative businesses in creating best-in-class AR experiences. </li> <li> Education Learn how educational institutions are developing the next generation of digital creatives. </li> </ul> <ul> <li> Agencies Find out how agencies use AR to unlock new value for their clients. </li> <li> Learning &amp. Development Explore how AR can level up your learning solutions, making them more engaging, interactive and memorable. </li> </ul> <ul> <li> Business Discover how businesses are are utilizing Zapworks to excite and engage customers. </li> </ul> </li> <li>Showcase</li> <li> Resources <ul> <li> Documentation &amp. Tutorials Explore the versatility of Zapworks with our comprehensive documentation website. </li> <li> Webinars Sign up for future webinars or search through the archive of previous recordings. </li> </ul> <ul> <li> Discord Find answers, share experiences and make connections with our supportive XR pioneers community. </li> </ul> <ul> <li> Product Updates See the latest Zapworks feature releases, product improvements and bug fixes. </li> </ul> </li> <li>Pricing</li> </ul> Log in Free trial Products <ul> <li> Back Create Unleash your creativity with our suite of tools and SDKs. <ul> <li>Zapworks Designer</li> <li>Mattercraft</li> <li>Zapworks Studio</li> <li>Universal AR SDK</li> </ul> </li> <li> Back Publish Distribute your content to the web or native applications. <ul> <li>WebAR</li> <li>AR Web Embed (NEW)</li> <li>WebXR</li> </ul> </li> <li> Back Learn Upskill your AR knowledge with bespoke training. <ul> <li>Zapworks Training</li> <li>No Code AR Training</li> <li>Advanced AR Training</li> <li>L&D AR Training</li> </ul> </li> </ul> Zapworks for <ul> <li>Enterprise</li> <li>Education</li> <li>Agencies</li> <li>Business</li> <li>Learning &amp. Development</li> </ul> Showcase Resources <ul> <li>Documentation &amp. Tutorials</li> <li>Webinars</li> <li>Discord</li> <li>Product Updates</li> </ul> Pricing Free trial Data Processing Addendum Last updated: 18th December 2019   This Data Processing Addendum (“DPA”) supplements and forms part of the Zapworks User Agreement for Business and Education users. Capitalised terms used, but not defined, in this DPA are defined in the User Agreement. &nbsp. Part 1: Introduction   Purpose This DPA sets out the terms that apply when Personal Data is processed by Zappar on behalf of an Account Holder as part of the Services, where the Account Holder is acting as a Controller for the purposes of UK or EU Data Protection law or regulation, including the European General Data Protection Regulation (“GDPR”) (collectively, the “Data Protection Laws”). It applies solely to the extent required by the Data Protection Laws and takes effect as of 25 May 2018.   Effect of DPA If a provision of this DPA conflicts with a provision of the User Agreement, then this DPA will control. The User Agreement will remain in full force and effect and will be unchanged except as modified by this DPA. This DPA will terminate automatically upon the expiry or termination of the User Agreement.   Acceptance Provided that the User is a party to an effective User Agreement, this DPA shall take effect automatically as between the parties. The parties may also, at the request of the Account Holder, enter into a hard copy version of this DPA which is physically signed by or on behalf of both parties. The parties may also by agreement enter into an individually negotiated data processing agreement provided such agreement satisfies the minimum requirements laid down in the Data Protection Laws.   Defined terms For the purposes of this DPA: <ul> <li> the expressions “Controller”, “Data Subject”, “Processor”, “Personal Data Breach” and “processing” have the same meaning as in Article 4 of the GDPR. and </li> <li> “Personal Data” means any User Content of the Account Holder that is or contains information that relates to an identified or identifiable natural person, to the extent that such information is protected as personal data under the Data Protection Laws. This does not include any personal data in respect of which Zappar is the sole Controller under the Data Protection Laws. </li> </ul> &nbsp.   Part 2: Details of Processing   Details of Zappar’s role as a Processor of Personal Data are as follows: Subject Matter of the Personal Data processing: The provision of the Services by Zappar to the Account Holder and their Authorised Users. Duration of the Personal Data processing: The term of the User Agreement and any period after the term prior to Zappar’s deletion of all Personal Data included within the User Content. Nature and purpose of the Personal Data processing: To enable the Account Holder and their Authorised Users to receive and Zappar to provide the Services, including publication, hosting and serving of User Content across Zappar’s technology platform. Categories of Personal Data: In general, this may consist of identifying information and organisation data of the Account Holder’s customers and end users and Personal Data of Data Subjects contained in User Content such as images, videos, voices. together with such other categories as are agreed by the parties and recorded in writing. It is acknowledged that Zappar does not allow the Services to be used for the purposes of processing any of the “sensitive categories” of Personal Data specified in Article 9(1) of the GDPR. Categories of Data Subjects: To the extent User Content contains Personal Data, it may concern the Account Holder’s end users, customers, employees, business contacts, members of the public and other individuals who have consented to their Personal Data being included within the Account Holder’s User Content. &nbsp. &nbsp. Part 3: Data processing terms   1. The roles of the parties To the extent that Zappar processes Personal Data in the course of providing the Services, it will do so only as a Processor acting on behalf of the Account Holder (as the Controller) and in accordance with the requirements of this DPA.   2.Scope of processing Zappar undertakes that it will only process the Personal Data on documented instructions from the Account Holder, including with regard to transfers of Personal Data to a third country or an international organisation, unless Zappar is required to do so by European Union or national law to which Zappar is subject. in such a case, Zappar shall inform the Account Holder of that legal requirement before processing, unless that law prohibits such information on important grounds of public interest. For the purposes of this clause, any processing necessary to provide the Services in the manner requested by the Account Holder or their Authorised User(s) shall be deemed to be a documented instruction to Zappar. Zappar shall immediately inform the Account Holder if, in Zappar’s opinion, an instruction given by or on behalf of the Account Holder would breach the GDPR or other European Union or Member State data protection provisions.   3. Obligations of the Account Holder The Account holder, as the Controller, shall be responsible for ensuring that: (a) it has complied, and will continue to comply, with all applicable laws relating to privacy and data protection, including the Data Protection Laws. and (b) it has, and will continue to have, the right to transfer, or provide access to, the Personal Data to Zappar for processing in accordance with the terms of the User Agreement and this DPA. The Account Holder shall have sole responsibility for the accuracy, quality and legality of Personal Data and the means by which the Account Holder acquired the Personal Data.   4. Confidentiality Zappar shall ensure that persons authorised by Zappar to process the Personal Data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality.   5. Security Zappar shall have in place and maintain throughout the term of this DPA appropriate technical and organisational measures to protect the Personal Data in accordance with the requirements of Article 32 of the GDPR.   6. Rights of Data Subjects Zappar shall taking into account the nature of the processing, provide the Account Holder with reasonable assistance by appropriate technical and organisational measures, insofar as this is possible and at the Account Holder’s cost, with fulfilling the Account Holder’s obligations to respond to requests by Data Subjects to exercise their rights laid down in Chapter III of the GDPR. If a request is made directly to Zappar, Zappar shall promptly inform the Account Holder. 7. Other assistance Zappar shall notify the Account Holder without undue delay after becoming aware of a Personal Data Breach affecting the Personal Data which is the subject of this DPA. Zappar shall also provide the Account Holder with reasonable assistance, at the Account Holder’s cost, in ensuring compliance with the Account Holder’s obligations pursuant to Articles 32 to 36 of the GDPR taking into account the nature of the processing and the information available to Zappar.   8. Deletion/ Return of Personal Data Upon the expiry or termination of the User Agreement, Zappar shall, at the choice of the Account Holder, delete or return to the Account Holder all relevant Personal Data and delete all existing copies, save to the extent that Zappar is required by any applicable law to retain some or all of the Personal Data.   9. Audit rights Zappar will make available to the Account Holder all information reasonably necessary to demonstration compliance with the obligations laid down in Article 28 of the GDPR. Whilst it is the parties’ intention ordinarily to rely on the provision of the documentation to verify Zappar’s compliance with this DPA, Zappar shall permit the Account Holder (or their appointed third party auditor who must not be a competitor of Zappar) to carry out an audit of Zappar’s processing of Personal Data under the User Agreement following a Personal Data Breach suffered by Zappar, or upon the instruction of a data protection authority. The Account Holder must give Zappar reasonable prior notice of such intention to audit, conduct its audit during normal business hours, and take all reasonable measures to prevent unnecessary disruption to Zappar’s operations. Any such audit shall be subject to Zappar’s security and confidentiality terms and guidelines. The Account Holder will reimburse Zappar for any such on-site audit at Zappar’s then-current rates, which shall be made available to the Account Holder upon request. The charges for the audit shall be reasonable taking into account the resources expended (or to be expended) by Zappar and where possible shall be agreed by the parties prior to commencement of the audit. If Zappar declines to follow any instruction requested by the Account Holder regarding audits, the Account Holder is entitled to terminate this DPA and the User Agreement.   10. Use of sub-processors The Account Holder agrees that Zappar may engage third party sub-processors (collectively, ”Sub-Processors”) to process the Personal Data on the Account Holder’s behalf. Zappar shall impose on each Sub-Processor obligations that protect the Personal Data to the same or substantially similar standard provided for by this DPA and shall remain liable for any breach of the DPA caused by a Sub-Processor. Zappar, may by giving reasonable notice, add or make changes to the Sub-Processors. If the Account Holder objects on reasonable grounds to any proposed change (e.g.if making Personal Data available to the Sub-Processor may violate applicable Data Protections Laws, or weaken the protections for such Personal Data) it must notify Zappar within 14 calendar days of the date of Zappar’s notification. Such notice shall contain the reasonable grounds for the objection. Following receipt of the Account Holder’s notice, the parties will work together in good faith to find an alternative solution. If the parties are unable to find an alternative solution acceptable to both of them within a reasonable period of time, which shall not exceed 30 calendar days, and Zappar is unable to continue to provide the Services to the Account Holder without use of the objected-to Sub-Processor, either party may at any time thereafter terminate the User Agreement by written notice to the other, without imposing a penalty for such termination on the Account Holder.   11. Amendment Zappar may update and change any part or all of this DPA at any time by posting a new version on zap.works provided that the updated DPA continues to meet the minimum requirements laid down in the Data Protection Laws. When Zappar makes changes the “Last Updated” date will be updated to reflect the date of the most recent version.   12. Governing Law This DPA shall be governed by and construed in all respects in accordance with the laws of England and Wales.       <ul> <li> Company <ul> <li> Zappar </li> <li> Zapworks </li> <li> Zapbox </li> <li> Careers </li> </ul> </li> <li> Zapworks Products <ul> <li> Create </li> <li> Zapworks Studio </li> <li> Zapworks Designer </li> <li> Universal AR SDK </li> <li> Mattercraft </li> <li> Publish </li> <li> Native Apps </li> <li> Measure </li> <li> Zapworks Analytics </li> </ul> </li> <li> Solutions <ul> <li> We make AR </li> <li> Retail </li> <li> Packaging </li> <li> Learning and Development </li> <li> Events </li> <li> You make AR </li> <li> Business </li> <li> Agencies </li> <li> Educators </li> <li> Learning and Development </li> </ul> </li> <li> Learn <ul> <li> Blog </li> <li> Docs &amp. Tutorials </li> <li> Community </li> <li> Competitions </li> <li>Zapworks Training</li> <li>No Code AR Training</li> <li>Advanced AR Training</li> <li>L&D AR Training</li> </ul> </li> <li> Legal <ul> <li> T&C's </li> <li> Privacy Policy </li> <li> Privacy Notice: B2B Marketing </li> <li> Cookies </li> <li> DPA </li> <li> User Agreement </li> <li> Content Policy </li> <li> Refund Policy </li> </ul> </li> </ul> Company <ul> <li> Zappar </li> <li> Zapworks </li> <li> Zapbox </li> <li> Careers </li> </ul> Zapworks Products <ul> <li> Create </li> <li> Zapworks Studio </li> <li> Zapworks Designer </li> <li> Universal AR SDK </li> <li> Mattercraft </li> <li> Publish </li> <li> Native Apps </li> <li> Measure </li> <li> Zapworks Analytics </li> </ul> Solutions <ul> <li> We make AR </li> <li> Retail </li> <li> Packaging </li> <li> Learning and Development </li> <li> Events </li> <li> You make AR </li> <li> Business </li> <li> Agencies </li> <li> Educators </li> <li> Learning and Development </li> </ul> Learn <ul> <li> Blog </li> <li> Docs &amp. Tutorials </li> <li> Community </li> <li> Competitions </li> <li>Zapworks Training</li> <li>No Code AR Training</li> <li>Advanced AR Training</li> <li>L&D AR Training</li> </ul> Legal <ul> <li> T&C's </li> <li> Privacy Policy </li> <li> Privacy Notice: B2B Marketing </li> <li> Cookies </li> <li> DPA </li> <li> User Agreement </li> <li> Content Policy </li> <li> Refund Policy </li> </ul> © 2024 Zappar Ltd. <ul> <li> </li> <li> </li> <li> </li> <li> </li> </ul>