Subject and Duration of the Addendum
This Addendum supplements the "Framework Data Processing Agreement – (DPA)” and is an integral part of it, concluded between SoftwareOne (“Processor”) and Customer (“Controller”) and describes the subject-matter, the nature and purpose of the processing, the type of personal data and the categories of data subjects. This is based on the Services Contract concluded between the parties. The duration of the Addendum corresponds to the duration of the DPA.
Subject Matter of the Data Processing
The processing by SoftwareOne shall be to enable: (i) the performance of the Services which is described in the Services Contract; and (ii) to fulfil all other obligations under the Services Contract.
Nature and Purpose of the Data Processing
The purpose of the processing of personal data by SoftwareOne is to provide the Services pursuant to the Service Contract.
Type of Personal Data
All data necessary for the provision of the Services, in particular personal master data (name, surname), email, and contractual and license data, consumption measurement/metering data.
Categories of Data Subjects
Employees, contractors, consultants and/or agents of the Customer and/or of its sub-contractors, suppliers or customers.
Approved Subcontractors
The Controller agrees to the engagement of the subcontractors listed below by entering into this Addendum. The following subcontractors may be used by the Processor and are approved by the Controller:
|
Subcontractor (Name, Company, Place of Business) |
Processing Site |
Type of Service |
Contractual Protections in Place |
|
SoftwareOne AG and its Affiliates |
Updates: https://www.softwareone.com/-/media/publishing-documents/swodata-processing-swo-deliverysites.pdf |
SoftwareOne will provide support to provide the Services. |
Intra Group Agreement + Standard Contractual Clauses |
|
Atlassian Corporation Plc.
|
Updates: https://support.atlassian.com/security-and-access-policies/docs/understand-data-residency/ |
ITSM Tool provider, Documentation tool, Code management tool, On-call and alert management tool |
DPA + Standard Contractual Clauses |
|
Microsoft
|
Updates: https://azure.microsoft.com/en-us/global-infrastructure/locations/ |
Cloud platform provider, used for Customer communication and collaboration |
DPA + Standard Contractual Clauses |
|
ServiceNOW
|
Europe: Amsterdam, Netherlands |
ITSM Tool provider; hosts customer information including names and contact information |
DPA + Standard Contractual Clauses |
|
Auth0
|
Germany; Ireland |
Identity Service provider |
DPA + Standard Contractual Clauses; Certification for EU-US Data Privacy Framework; Swiss-US Data Privacy Framework Certification; UK Extension to the EU-US Data Privacy Framework |