2024-391-E-Housing Dept-Submittable Holdings-Online Application Software Process

Browse Search

Submittable Customer Terms of Service v1.4 Page 13 of 28 “UK Standard Contractual Clauses” means the addendum to the Standard Contractual Clauses issued b y the UK Information Commissioner under Section 119A(1) of the UK Data Protection Act 2018 (version B1.0, in force March 21, 2022). 2. Conflicts. In the case of conflict or ambiguity between the terms of this DPA and the provisions of the TOS, the provisions of this DPA will prevail. 3. Personal Information Types; Processing Purposes; General Obligations. 3.1. Submittable shall comply with all Privacy and Data Protection Requirements applicable to Submittable’s provision of the Services, including as a Processor under the GDPR and Service Provider under the CCPA. 3.2. Customer shall comply with all Privacy and Data Protection Requirements applicable to Customer’s use of the Services, Customer’s transfer of Personal Information to Submittable, and for the Processing instructions it gives to Submittable. As the Business and Controller of Personal Information, Customer shall have sole responsibility for the accuracy, quality, and legality of such instructions pertaining to Personal Information collected and stored in regards to all End Users and the means by which Customer acquires Personal Information, including any applicable requirement to provide notice to Data Subjects of the use of Submittable as a Processor. 3.3. Appendix 1 describes the general categories, subject-matter, duration, nature, purpose, type, and categories of Processing, the types of Personal Information involved in the Processing, and the Data Subject types Submittable may use or Process to fulfill the Business Purpose. 4. Submittable’s Obligations. 4.1. Submittable will only Process the Personal Information to the extent, and in such a manner, as is necessary: 4.1.1. for the Business Purpose and in accordance with Customer’s reasonable and lawful written instructions, where such instructions are consistent with the terms of the TOS and this DPA; 4.1.2. to respond to a Data Subject Request when exercising his or her rights under the GDPR, CCPA, or other Privacy and Data Protection Requirements that grant similar rights as permitted by this DPA; 4.1.3. to comply with applicable law; or 4.1.4. as authorized in writing or appropriate electronic consent by Customer or the Data Subject. 4.2. Submittable will reasonably assist Customer with meeting Customer’s compliance obligations under the Privacy and Data Protection Requirements, taking into account the nature and scope of the Processing and the Personal Information available to Submittable. 5. Submittable’s Employees. Submittable will limit Personal Information access to personnel who require Personal Information access to meet Submittable’s obligations under this DPA and the TOS. Submittable will ensure that all employees: (1) are informed of the Personal Information’s confidential nature and use restrictions; and (2) are subject to a contractual or statutory obligation of confidentiality. 6. Sub-processors. 6.1. Submittable may only use a Sub-processor to Process Personal Information if: 6.1.1. Submittable or a Submittable Affiliate has entered into a written agreement with each Sub- processor containing data protection obligations not less protective than those in this DP A with respect to the protection of Personal Information to the extent applicable to the nature of the services provided by such Sub-processor; and 6.1.2. Submittable remains liable for breaches of this DPA caused by its Sub-processor’s acts and omissions. 6.2. Customer grants Submittable the general written authorization to engage all the Sub -processors found at https://submittable.com/subprocessors. Customer agrees and acknowledges Submittable’s current Sub- processors are authorized to Process Personal Information as set forth in this DPA. Submittable shall update the list of Sub-processors with the identities of those Sub-processors and their country of location on its website at: https://www.submittable.com/subprocessors (“Updated Sub-processor List”). DocuSign Envelope ID: 367666E5-0A49-40C9-BFB5-74D495BAB8F1