Data processing addendum · Consellations

Pending legal review. A summary of the DPA terms we'll offer. The signed version, with the Standard Contractual Clauses attached, is available to Enterprise customers on request.

This Data Processing Addendum (“DPA”) forms part of the Terms of service between Consellations, Inc. (“Processor”) and the customer (“Controller”) when Consellations processes personal data on the customer's behalf.

1. Roles and scope

The customer is the controller of personal data in Customer Content, such as contacts, notes and transcripts. Consellations is the processor and processes that data only to provide the Service, on the customer's documented instructions, which are these Terms, this DPA and the customer's use of the Service.

2. Details of processing

Subject matter	Providing the Consellations agent workspace service
Duration	The term of the agreement, plus the deletion period
Data subjects	Customer's users, and the customer's contacts, prospects and meeting participants
Categories of data	Names, contact details, job information, notes, meeting audio and transcripts, and any data the customer chooses to store
Special categories	None intended. Customers shouldn't store special category data unless required

3. Processor obligations

Process personal data only on documented instructions, and tell the customer if an instruction appears to break the law.
Make sure personnel are bound by confidentiality.
Keep appropriate technical and organizational measures, as described on our Security page.
Help the customer respond to data subject requests and with impact assessments, where reasonable.
Notify the customer without undue delay, and within 72 hours where feasible, after becoming aware of a personal data breach.
Delete or return personal data at the end of the agreement, unless the law requires keeping it.
Make available the information needed to show compliance, and allow reasonable audits, normally met by documentation and questionnaires.

4. Subprocessors

The customer authorizes the listed subprocessors. We'll give notice before adding or replacing a subprocessor, and the customer may object on reasonable data protection grounds.

5. International transfers

Transfers from the EEA, UK or Switzerland are covered by the Standard Contractual Clauses (Module 2, and Module 3 where applicable) and the UK Addendum, which are incorporated by reference.

6. Request a signed copy

Email privacy@consellations.com.