Data Processing Addendum (DPA)

This Data Processing Addendum forms part of the CertNudge Terms of Use and applies where CertNudge processes personal data on your behalf.

1. Scope and roles

You are the controller and CertNudge is the processor for customer personal data submitted to the Services.

2. Processing instructions

CertNudge will process personal data only on documented instructions from you, including as set out in the Terms and this DPA.

3. Security and sub-processors

CertNudge implements appropriate technical and organisational measures and may use sub-processors subject to equivalent data protection obligations.

4. Assistance and deletion

CertNudge will provide reasonable assistance for data subject requests and will delete or return personal data at the end of service provision, unless law requires retention.

5. International transfers

Where personal data is transferred internationally, CertNudge will use appropriate safeguards required by applicable data protection law.