Programa Data Processing Addendum

Last Updated: April 9, 2025

Definitions

  1. We are an Australian based company and we adhere to the obligations of the Australian Privacy Act as a starting point. As we offer our platform and services to users globally, we also carefully consider and where possible enact practices and obligations for users based in regions with alternative regulatory regimes and requirements.

  2. Denpro Pty Ltd (trading as Programa) is the controller of your personal data, unless otherwise specified.

  3. “European Data Protection Laws” means European Union Regulation 2016/679 (the “General Data Protection Regulation”), the UK Data Protection Act 2018 (“DPA”), the UK General Data Protection Regulation as defined by the DPA as amended by the Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (together with the DPA, the “UK GDPR”), and any relevant law, statute, regulation, rule or other binding instrument which implements the above or otherwise relates to data protection, privacy, data security or the processing of Personal Data in any European member state or the United Kingdom, in each case as applicable and in force, and as amended, consolidated, re-enacted or replaced from time to time.

  4. “Personal Data” shall be interpreted in accordance with Australian Data Protection Laws, as applicable, and relating to an identifiable or identified individual who visits or engages in transactions with your account (a “Customer”), which Programa Processes as a Data Processor or Service Provider (as defined under such laws) in the course of providing you, as a Data Controller or Business (as defined under such laws), with the Services. The term “Personal Data” shall also include “Personal Information” as defined under US Data Protection Laws. Notwithstanding the foregoing sentence, Personal Data does not include information that Programa processes in the context of services that it provides directly to a user as part of the Terms of Service.

  5. “US Data Protection Laws” means the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA”), the Virginia Consumer Data Protection Act (“VCDPA”), the Colorado Privacy Act (“CPA”), the Utah Consumer Privacy Act (“UCPA”) the Connecticut Act Concerning Personal Data Privacy and Online Monitoring (“CTDPA”), and other similar comprehensive state privacy laws that place obligations on a Business or Controller in relation to Personal Data (as defined under such laws), and any relevant regulation, rule or other binding instrument which implements such laws, in each case as applicable and in force, and as amended, consolidated, re-enacted or replaced from time to time.

  6. All other capitalised terms in this Addendum shall have the same definition as in the Terms of Service.

Details of Processing

The parties agree that the Definitions of this Addendum describes the subject matter and details of the processing of Personal Data.

Programa may aggregate, anonymize or de-identify Personal Data and process such data for the purposes set out in the Definitions or as otherwise permitted by applicable law.

To the extent Programa receives from you Personal Data that has been Deidentified (as defined in the General section of this Addendum), Programa will maintain and use the data only in a Deidentified fashion.

 

European Union and United Kingdom

  1. This section applies only to the extent that Programa’s Processing of Personal Data is subject to European Data Protection Laws. In this section, “Data Processor”, “Data Controller”, “Data Subject”, “Processing”, “Subprocessor”, and “Supervisory Authority” shall be interpreted in accordance with the European Data Protection Laws.

  2. You acknowledge that Programa acts as an independent Data Controller with regards to personal data that it collects from consumers in connection with its consumer-facing applications and services.

  3. Where a Data Subject is located in the European Economic Area or the United Kingdom, that Data Subject’s Personal Data will be Processed by Denpro Pty Ltd (trading as Programa), unless otherwise specified. As part of providing the Services, this Personal Data may be transferred to other regions, including to the United States. Such transfers will be completed in compliance with relevant Data Protection Legislation.

  4. When Programa Processes Personal Data in the course of providing the Services, Programa will:
    1. Process the Personal Data as a Data Processor and/or Service Provider, only for the purpose of providing the Services in accordance with documented instructions from you (provided that such instructions are commensurate with the functionalities of the Services), and as may subsequently be agreed to by you. If Programa is required by law to Process the Personal Data for any other purpose, Programa will provide you with prior notice of this requirement, unless Programa is prohibited by law from providing such notice;
    2. Notify you if, in Programa’s opinion, your instruction for the Processing of Personal Data infringes applicable European Data Protection Laws;
    3. Notify you promptly, to the extent permitted by law, upon receiving an inquiry or complaint from a Supervisory Authority relating to Programa’s Processing of the Personal Data;
    4. Implement reasonable technical and organisational measures enabling you to execute requests relating to your Customer’s Personal Data that you are obligated to fulfil;
    5. Implement and maintain appropriate technical and organisational measures to protect the Personal Data against unauthorised or unlawful processing and against accidental loss, destruction, damage, theft, alteration or disclosure. These measures shall be appropriate to the harm which might result from any unauthorised or unlawful processing, accidental loss, destruction, damage or theft of Personal Data and appropriate to the nature of the Personal Data which is to be protected;
    6. Upon request, provide reasonable information to help you complete your data protection impact assessments and prior consultations with regulatory authorities;
    7. Provide you, upon request, with up-to-date attestations, reports or extracts thereof where available from a source charged with auditing Programa’s data protection practices (e.g. external auditors, internal audit, data protection auditors), or suitable certifications, to enable you to assess compliance with the terms of this Addendum;
    8. Notify you without undue delay upon becoming aware of and confirming any accidental, unauthorised, or unlawful processing of, disclosure of, or access to the Personal Data;
    9. Ensure that its personnel who access the Personal Data are subject to confidentiality obligations; and
    10. Upon termination of the Agreement, Programa will promptly initiate its purge process to delete or anonymise the Personal Data.

  5. In the course of providing the Services, you acknowledge and hereby grant Programa general written authorisation to use Subprocessors to Process the Personal Data. Programa’s use of any specific Subprocessor to process the Personal Data must be in compliance with European Data Protection Laws and must be governed by a contract between Programa and Subprocessor that requires comparable protections to this Data Processing Addendum. If you object to the appointment of a Subprocessor you may terminate this agreement in accordance with the Terms of Service, if applicable.

  6. You warrant that you have complied and continue to comply with European Data Protection Laws, in particular, you have obtained any necessary consents or given any necessary notices and otherwise have a legitimate ground to disclose data to Programa and enable the processing of Personal Data by Programa as set out in this Agreement.

US Users / Consumers

 

  1. This section applies only to the extent that, for purposes of the US Data Protection Laws, you are a Business or Controller and in the course of providing the Services, Programa processes Personal Data about US User / Consumers that is subject to US Data Protection Laws. In this section, “Business”, “Business Purpose”, “Commercial Purpose”, “Controller”, “Deidentified”, “Processor”, “Sell”, “Sale”, “Service Provider” shall have the meanings ascribed to them in US Data Protection Laws, and “Share” shall have the meaning ascribed to it in the CCPA, are incorporated herein by reference.

  2. With respect to such Personal Data, and to the extent required by applicable US Data Protection Laws, Programa will:
    1. Process Personal Data as a Service Provider and/or Processor on your behalf to provide the Services or as otherwise permitted by US Data Protection Laws;
    2. Not retain, use or disclose Personal Data outside its direct business relationship with you or for any purpose other than to provide the Services, including retaining, using or disclosing such Personal Data for a Commercial Purpose other than performing the Business Purposes described in the Agreement, or as otherwise permitted by US Data Protection Laws;
    3. Not Sell or Share such Personal Data;
    4. Not combine Personal Data collected in connection with performing the Services with Personal Data received from another source or collected from its own interactions with the individual, except to perform the Services, with consent or direction, or as otherwise permitted by US Data Protection Laws;
    5. In connection with processing the Personal Data, comply with provisions of the US Data Protection Laws applicable to Service Providers or Processors, including providing the same level of privacy protection required of Businesses or Controllers by the US Data Protection Laws, and notify you if it determines it can no longer meet these obligations. You may, upon receiving such a notice, take reasonable and appropriate steps to stop and remediate any unauthorised use of Personal Data by Programa;
    6. Only engage subcontractors to process Personal Data on its behalf pursuant to a written contract that requires comparable protections to this Data Processing Addendum. In the course of providing the Services, you acknowledge and hereby grant Programa general written authorisation to use subcontractors to Process the Personal Data. Programa’s use of any specific Subprocessor to process the Personal Data must be in compliance with US Data Protection Laws and must be governed by a contract between Programa and Subcontractor that requires comparable protections to this Data Processing Addendum. If Programa appoints a new subcontractor or intends to make changes concerning the addition or replacement of subcontractors, you will have seven (7) days from the date of the update to object to the change. In the event we do not receive a response from you, the change will be deemed to be accepted. If you object to the appointment of a subcontractor you may terminate this agreement in accordance with the Terms of Service, if applicable.
    7. Ensure that its personnel who process the Personal Data are subject to confidentiality obligations with respect to such information;
    8. Take reasonable and appropriate steps, upon reasonable written notice from you and subject to the confidentiality obligations set out in the Agreement, to assist you with confirming that Programa’s use of Personal Data is consistent with your obligations under US Data Protection Laws;
    9. Upon request, provide a report of a reasonable assessment of Programa’s policies and technical and organisational measures in support of its obligations under applicable US Data Protection Laws using an appropriate and accepted control standard or framework and assessment procedure for such assessments; and
    10. Upon termination of the Terms of Service, Programa will promptly initiate its purge process to delete or Deidentify the Personal Data.

You represent and warrant that you:

  • Have obtained any necessary consents, rights and authorisations and given any necessary notices to individuals regarding your disclosure of Personal Data to Programa to enable Programa’s processing of Personal Data to provide the Services, as required by applicable law;
  • Will not share with Programa any Personal Data of any individual subject to the US Data Protection Laws who has exercised an opt-out that you have committed to honouring;
  • Will not share with Programa sensitive data of any US User / Consumer who has not consented to the processing of their sensitive data;
  • Inform Programa of any rights requests individuals make to you pursuant to US Data Protection Laws that Programa must comply with and provide the information necessary for Programa to comply with the requests; and
  • Be solely liable for your compliance with such laws.

 

You and Programa agree that the existence of this Addendum does not constitute an admission that sharing of Personal Data constitutes a Sale or a Share.

General

 

  1. In the event of any conflict or inconsistency between the provisions of the Terms of Service and this Addendum, the provisions of this Addendum shall prevail, unless such provisions contradict a requirement under applicable law, in which case such requirement shall prevail. For avoidance of doubt and to the extent allowed by applicable law, any and all liability under this Addendum, including limitations thereof, will be governed by the relevant provisions of the Agreement. You acknowledge and agree that Programa may amend this Addendum from time to time by posting the relevant amended and restated Addendum on Programa’s website, and such amendments to the Addendum are effective as of the date of posting. Your continued use of the Services after the amended Addendum is posted to Programa’s website constitutes your agreement to, and acceptance of, the amended Addendum. If you do not agree to any changes to the Addendum, do not continue to use the Service.

  2. Save as specifically modified and amended in this Addendum, all of the terms, provisions and requirements contained in the Agreement shall remain in full force and effect and govern this Addendum. If any provision of the Addendum is held illegal or unenforceable in a judicial proceeding, such provision shall be severed and shall be inoperative, and the remainder of this Addendum shall remain operative and binding on the parties.

  3. The terms of this Addendum shall be governed by and interpreted in accordance with the laws of the Australia applicable therein, without regard to principles of conflicts of laws. The parties irrevocably and unconditionally submit to the exclusive jurisdiction of the courts of Victoria, Australia with respect to any dispute or claim arising out of or in connection with this Addendum.

 

Appendix 1: Details of Processing

 

  • Nature and purpose of processing: To provide and improve the Services under the Programa Terms of Service and any other terms that this Addendum is incorporated into, provide any related support to Customer, as otherwise permitted under European Data Protection Laws or US Data Protection Laws, as applicable, or as initiated by you from time to time.

  • Subject Matter, Types of Personal Data and Categories of Data Subjects: Personal Data relating to Customers and Users.

  • Duration of processing: The term of this Addendum plus the period from the end of the term until deletion of all Customer and/or User Personal Data by Programa in accordance with its obligations under this Addendum.
Programa Data Processing Addendum
  1. Schedules Update:
  2. Client Dashboard & Brag Stats
  3. Pinboards Update
  4. Web Clipper Update
  5. On the Horizon
  6. Streamlining the A&D industry – it’s about time.
  7. Recognized for Excellence in Design Software.
    1. Interior Design Software For Professional Interior Designers
    2. Interior Design & Architecture Software For Professional Interior Designers & Architects
    3. Seamless Integration with Product Library
    4. Tailored PDF Exports
    5. Intuitive Schedule Navigation
    6. <strong>How It Works</strong>
    7. <strong>Why It Matters</strong>
    8. <strong>Your New Shortcut for Smart Scheduling</strong>
    9. Tablet-friendly update
      1. Information about how Programa uses Cookies
      2. What are cookies?
      3. How do we use cookies?
      4. Strictly Necessary Cookies
      5. Optional Cookies
      6. Options for managing cookies and interest-based ads
      7. Updates to this Policy
      8. How to contact us
      9. Programa Interior Design Software: A Comprehensive Project Management and Collaboration Solution for Architects and Interior Designers
      10. User-friendly Interface and Tools for Seamless Project Management
    10. Getting Started Dashboard
    11. Schedules
    12. Client Dashboard
    13. Web Clipper
    14. Pinboards
    15. Project Management
    16. Invoicing
    17. Address Book
    18. Trade Portal
    19. The Issue
    20. The Result
    21. The Solution
    22. Latest Updates
    23. Fixed Image Layouts
    24. Web Clipper Scraper
    25. Hyperlinked URLs
    26. Improved Notes Visibility in Presentation Mode
    27. Pinboards & Client Dashboard Integration
      1. The Hidden Cost of Chaos
      2. Enter the Digital Design Revolution
      3. Master Your Design Universe
      4. Design Intelligence at Work
      5. The Feedback Doesn't Lie
      6. Beyond Organization: Empowering Creativity
      7. A Day in the Life with Programa
      8. The Future of Interior Design is Here
    28. <strong>Small-Batch Ceramics With Lasting Impact</strong>
    29. &nbsp;
    30. <strong>Artisanal Craftsmanship and Timeless Techniques</strong>
    31. Design Philosophy Rooted in Simplicity and Harmony
    32. The Studio Enti Way
    33. What is a Spec Sheet?
    34. The Power of Programa
    35. Flexible Design Features
    36. Ease of Use
    37. Cost Savings
    38. Increased Productivity
    39. 13 June 2024
    40. 07 June 2024
    41. 06 June 2024
    42. 04 June 2024
    43. 11 October 2024
    44. 10 October 2024
    45. 07 October 2024
    46. 03 October 2024
    47. 02 October 2024
    48. Welcome Back!
    49. 06 January 2025
    50. 30 August 2024
    51. 27 August 2024
    52. 22 August 2024
    53. 21 August 2024
    54. 20 August 2024
    55. 19 August 2024
    56. 16 August 2024
    57. 15 August 2024
      1. Features
      2. Integrations & Sharing
      3. Upgrades
    58. 31 October 2024
    59. 30 October 2024
    60. 29 October 2024
    61. 24 October 2024
    62. 23 October 2024
    63. 22 October 2024
    64. 17 October 2024
    65. 15 October 2024
    66. 14 August 2024
    67. 12 August 2024
    68. 13 August 2024
    69. 07 August 2024
    70. 08 August 2024
    71. 09 August 2024
    72. 05 August 2024
    73. 01 August 2024
    74. Top practices for managing money
  8. Why These Events Matter More Than Ever
  9. Where Innovation Meets Implementation In The States
  10. European Design Destinations: Where Dreams Take Shape
  11. Maximizing Your Event Experience
  12. Making It All Work Together
    1. Client Portal
    2. Client Communication
    3. Rebranding
    4. Client Testimonial
    5. Software Solution
    6. 14 May 2025
    7. 07 May 2025
    8. 01 May 2025
    9. 23 April 2025
    10. 12 April 2025
    11. 9 April 2025
    12. 7 April 2025
    13. 3 April 2025
    14. 1 April 2025
    15. 28 March 2025
    16. 25 March 2025
    17. 20 March 2025
    18. 18 March 2025
    19. It's that time of year!
    20. 19 December 2024
    21. 17 December 2024
    22. 10 December 2024
    23. 09 December 2024
    24. 03 December 2024
    25. 28 November 2024
    26. 27 November 2024
    27. 26 November 2024
    28. 20 November 2024
    29. 19 November 2024
    30. 13 November 2024
    31. 08 November 2024
    32. 30 September 2024
    33. 25 September 2024
    34. 20 September 2024
    35. 19 September 2024
    36. 17 September 2024
    37. 13 September 2024
    38. 11 September 2024
    39. 06 September 2024
    40. 05 September 2024
    41. 02 September 2024
    42. 31 July 2024
    43. 30 July 2024
    44. 29 July 2024
    45. 26 July 2024
    46. 23 July 2024
    47. 18 July 2024
    48. 12 July 2024
    49. 09 July 2024
    50. 05 July 2024
    51. 04 July 2024
    52. 02 July 2024
    53. 01 July 2024
    54. 26 June 2024
    55. 19 June 2024
    56. 18 June 2024
    57. 17 June 2024
    58. 30 May 2024
    59. 27 May 2024
    60. 24 May 2024
    61. 23 May 2024
    62. 16 May 2024
    63. 14 May 2024
    64. 09 May 2024
    65. 03 May 2024
    66. 02 May 2024
    67. 29 April 2024
    68. 24 April 2024
    69. 22 April 2024
  13. April 16 2024
  14. 15 April 2024
  15. Other updates
  16. 11 April 2024
  17. <strong>09 April 2024</strong>
    1. The Importance of Project Management in Interior Design
    2. Tips for Becoming a Better Interior Designer
    3. Real-World Examples of Successful Project Management in Interior Design
    4. Recognising the Impact of Mood Boards in Design
    5. Elevate Your Mood Board Creation and Collaboration
    6. Leveraging Programa’s Pinboards Throughout the Project
      1. The End of Creative Interruption
      2. Where Inspiration Meets Intelligence
  18. The Dawn of SmartSpec: Your Creative Companion
    1. Creativity Amplified
    2. Beyond Documentation: The Future of Design Workflow
    3. Your Practice, Transformed
    4. Join the Creative Revolution
    5. The Future is Here
    6. Experience the Transformation
    7. Why Use Interior Design Client Proposal Templates?
    8. Key Components of an Interior Design Presentation Template
    9. Conclusion
    10. Q3 Product Update
    11. The world’s best scheduling software gets even better.
    12. The All-new Web Clipper
    13. Other Improvements
    14. What’s next?
    15. Instant Sharing, Seamless Collaboration
    16. Customisation at its Best
  19. Discover the future of sourcing and specification within Programa
  20. The marketplace made for designers and suppliers
  21. What’s new. Trade Portal 2.0?
    1. Sleek new look and feel
    2. Find exactly what you need
    3. Recommendations, category and brand highlights
    4. Tailored to your needs
  22. Why designers love this
    1. Start using Trade Portal 2.0
      1. Support
      2. Information about the Programa Payments Service
      3. The Programa Payments Service
      4. Getting or Activating a Payments Services Account
      5. Processing Transactions and Receiving Your Funds
      6. <strong>Termination and Other General Legal Terms</strong>
      7. <strong>Contact Support</strong>
      8. Information about how Programa handles your data
      9. Introduction
      10. Our Values<br />
      11. Why we process your information
      12. <br />Your rights over your information
      13. Where we transfer your information
      14. How long do we retain your information
      15. Our use of advanced technologies
      16. How we protect your information
      17. How we use “cookies” and other tracking technologies
      18. How you can reach us
      19. Types of data we collect and process
      20. What Personal Data we receive
      21. Retention
      22. Our purpose for using your personal data
      23. Disclosing your personal data<br />
      24. Changes to this Privacy Policy
      25. Additional Privacy Information for Brands & Suppliers<br />
      26. When and why we share your information with others
      27. Your rights over your information
      28. How long we retain your information
      29. Your customers’ information
      30. Additional Information about how we process data globally
      31. Processing data globally to fulfil our service obligations
      32. United States Regional Privacy Notice
      33. What information we collect and share about you
      34. Why we collect and share your Personal Information
      35. Sources of Personal Information
      36. How long we keep your information
      37. Getting Started with Shared Invoices
      38. Real-World Applications for Designers and Architects
      39. Key Benefits of the Shared Invoices Update
    2. With Programa’s Client Dashboard, you can:
    3. Minimalise Misunderstandings, Maximalise Results
    4. Shared Schedules and Integration with Client Dashboard
    5. Collaboration between Designers and Clients
      1. Take Full Control of Client Access with Ease
      2. View and Manage Access
      3. Client Overview & Quick Access Controls
      4. File-Specific Filtering
      5. Benefits of the Update
      6. Spreadsheets Weren’t Built for Interior Design
      7. Specification Simplified: Say Goodbye to Arduous Data Entry
      8. Always Up-to-Date: Live Schedules for Real-Time Collaboration
      9. Seamless Sharing and Client Communication
      10. Build Your Own Product Libraries
      11. Eliminate Stress with Real-Time Version Control
      12. Track, Manage, Deliver: Stay On Top of Your Projects
      13. Effortless Integration and Customization
      14. Join Thousands of Designers Transforming Their Workflows with Programa
      15. Key Features:
    6. What is FF&E in Interior Design?
    7. Why is FF&E Management Crucial?
    8. How Programa is Changing the FF&E Interior Design Software Game
    9. Why Programa Stands Out from Other FF&E Interior Design Software
    10. The Future of Interior Design with Programa
    11. Seven Tips for Knowing Your Value as an Interior Designer
  23. <strong>1. Get clear on your offering.</strong>
  24. <strong>2. Know who you want to work with.</strong>
  25. <strong>3. Don’t compare yourself to others.</strong>
  26. <strong>4. Set clear boundaries.</strong>
  27. <strong>5. Learn to say no.</strong>
  28. <strong>6. Follow systems and processes.</strong>
  29. <strong>7. Get help.</strong>
    1. A Collaborative Journey
    2. Movement & Aesthetic
    3. About Coco Flip
    4. Simplify Your FF&E Selection Process
    5. Effortless Updates and Revisions
    6. Collaboration Made Easy
    7. Optimized Finishes Schedule Management
    8. The Future Of FF&E With Programa
      1. Definitions
      2. Details of Processing
      3. European Union and United Kingdom
      4. US Users / Consumers
      5. General
      6. Appendix 1: Details of Processing
Try Programa for free with a 7 day trial

Try Programa for free with a 7 day trial

Join the world’s best studios

Programa Data Processing Addendum

 

Last Updated on: 25 August, 2024

 

1. Definitions

 

  1. We are an Australian based company and we adhere to the obligations of the Australian Privacy Act as a starting point. As we offer our platform and services to users globally, we also carefully consider and where possible enact practices and obligations for users based in regions with alternative regulatory regimes and requirements.
  2. Denpro Pty Ltd (trading as Programa) is the controller of your personal data, unless otherwise specified.
  3. “European Data Protection Laws” means European Union Regulation 2016/679 (the “General Data Protection Regulation”), the UK Data Protection Act 2018 (“DPA”), the UK General Data Protection Regulation as defined by the DPA as amended by the Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (together with the DPA, the “UK GDPR”), and any relevant law, statute, regulation, rule or other binding instrument which implements the above or otherwise relates to data protection, privacy, data security or the processing of Personal Data in any European member state or the United Kingdom, in each case as applicable and in force, and as amended, consolidated, re-enacted or replaced from time to time.
  4. “Personal Data” shall be interpreted in accordance with Australian Data Protection Laws, as applicable, and relating to an identifiable or identified individual who visits or engages in transactions with your account (a “Customer”), which Programa Processes as a Data Processor or Service Provider (as defined under such laws) in the course of providing you, as a Data Controller or Business (as defined under such laws), with the Services. The term “Personal Data” shall also include “Personal Information” as defined under US Data Protection Laws. Notwithstanding the foregoing sentence, Personal Data does not include information that Programa processes in the context of services that it provides directly to a user as part of the Terms of Service.
  5. “US Data Protection Laws” means the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA”), the Virginia Consumer Data Protection Act (“VCDPA”), the Colorado Privacy Act (“CPA”), the Utah Consumer Privacy Act (“UCPA”) the Connecticut Act Concerning Personal Data Privacy and Online Monitoring (“CTDPA”), and other similar comprehensive state privacy laws that place obligations on a Business or Controller in relation to Personal Data (as defined under such laws), and any relevant regulation, rule or other binding instrument which implements such laws, in each case as applicable and in force, and as amended, consolidated, re-enacted or replaced from time to time.
  6. All other capitalised terms in this Addendum shall have the same definition as in the Terms of Service.

2. Details of Processing

The parties agree that the Definitions of this Addendum describes the subject matter and details of the processing of Personal Data. Programa may aggregate, anonymize or de-identify Personal Data and process such data for the purposes set out in the Definitions or as otherwise permitted by applicable law. To the extent Programa receives from you Personal Data that has been Deidentified (as defined in the General section of this Addendum), Programa will maintain and use the data only in a Deidentified fashion.

 

3. European Union and United Kingdom

  1. This section applies only to the extent that Programa’s Processing of Personal Data is subject to European Data Protection Laws. In this section, “Data Processor”, “Data Controller”, “Data Subject”, “Processing”, “Subprocessor”, and “Supervisory Authority” shall be interpreted in accordance with the European Data Protection Laws.
  2. You acknowledge that Programa acts as an independent Data Controller with regards to personal data that it collects from consumers in connection with its consumer-facing applications and services.
  3. Where a Data Subject is located in the European Economic Area or the United Kingdom, that Data Subject’s Personal Data will be Processed by Denpro Pty Ltd (trading as Programa), unless otherwise specified. As part of providing the Services, this Personal Data may be transferred to other regions, including to the United States. Such transfers will be completed in compliance with relevant Data Protection Legislation.
  4. When Programa Processes Personal Data in the course of providing the Services, Programa will:
    1. Process the Personal Data as a Data Processor and/or Service Provider, only for the purpose of providing the Services in accordance with documented instructions from you (provided that such instructions are commensurate with the functionalities of the Services), and as may subsequently be agreed to by you. If Programa is required by law to Process the Personal Data for any other purpose, Programa will provide you with prior notice of this requirement, unless Programa is prohibited by law from providing such notice;
    2. Notify you if, in Programa’s opinion, your instruction for the Processing of Personal Data infringes applicable European Data Protection Laws;
    3. Notify you promptly, to the extent permitted by law, upon receiving an inquiry or complaint from a Supervisory Authority relating to Programa’s Processing of the Personal Data;
    4. Implement reasonable technical and organisational measures enabling you to execute requests relating to your Customer’s Personal Data that you are obligated to fulfil;
    5. Implement and maintain appropriate technical and organisational measures to protect the Personal Data against unauthorised or unlawful processing and against accidental loss, destruction, damage, theft, alteration or disclosure. These measures shall be appropriate to the harm which might result from any unauthorised or unlawful processing, accidental loss, destruction, damage or theft of Personal Data and appropriate to the nature of the Personal Data which is to be protected;
    6. Upon request, provide reasonable information to help you complete your data protection impact assessments and prior consultations with regulatory authorities;
    7. Provide you, upon request, with up-to-date attestations, reports or extracts thereof where available from a source charged with auditing Programa’s data protection practices (e.g. external auditors, internal audit, data protection auditors), or suitable certifications, to enable you to assess compliance with the terms of this Addendum;
    8. Notify you without undue delay upon becoming aware of and confirming any accidental, unauthorised, or unlawful processing of, disclosure of, or access to the Personal Data;
    9. Ensure that its personnel who access the Personal Data are subject to confidentiality obligations; and
    10. Upon termination of the Agreement, Programa will promptly initiate its purge process to delete or anonymise the Personal Data.
  5. In the course of providing the Services, you acknowledge and hereby grant Programa general written authorisation to use Subprocessors to Process the Personal Data. Programa’s use of any specific Subprocessor to process the Personal Data must be in compliance with European Data Protection Laws and must be governed by a contract between Programa and Subprocessor that requires comparable protections to this Data Processing Addendum. If you object to the appointment of a Subprocessor you may terminate this agreement in accordance with the Terms of Service, if applicable.
  6. You warrant that you have complied and continue to comply with European Data Protection Laws, in particular, you have obtained any necessary consents or given any necessary notices and otherwise have a legitimate ground to disclose data to Programa and enable the processing of Personal Data by Programa as set out in this Agreement.

4. US Users / Consumers

  1. This section applies only to the extent that, for purposes of the US Data Protection Laws, you are a Business or Controller and in the course of providing the Services, Programa processes Personal Data about US User / Consumers that is subject to US Data Protection Laws. In this section, “Business”, “Business Purpose”, “Commercial Purpose”, “Controller”, “Deidentified”, “Processor”, “Sell”, “Sale”, “Service Provider” shall have the meanings ascribed to them in US Data Protection Laws, and “Share” shall have the meaning ascribed to it in the CCPA, are incorporated herein by reference.
  2. With respect to such Personal Data, and to the extent required by applicable US Data Protection Laws, Programa will:
    1. Process Personal Data as a Service Provider and/or Processor on your behalf to provide the Services or as otherwise permitted by US Data Protection Laws;
    2. Not retain, use or disclose Personal Data outside its direct business relationship with you or for any purpose other than to provide the Services, including retaining, using or disclosing such Personal Data for a Commercial Purpose other than performing the Business Purposes described in the Agreement, or as otherwise permitted by US Data Protection Laws;
    3. Not Sell or Share such Personal Data;
    4. Not combine Personal Data collected in connection with performing the Services with Personal Data received from another source or collected from its own interactions with the individual, except to perform the Services, with consent or direction, or as otherwise permitted by US Data Protection Laws;
    5. In connection with processing the Personal Data, comply with provisions of the US Data Protection Laws applicable to Service Providers or Processors, including providing the same level of privacy protection required of Businesses or Controllers by the US Data Protection Laws, and notify you if it determines it can no longer meet these obligations. You may, upon receiving such a notice, take reasonable and appropriate steps to stop and remediate any unauthorised use of Personal Data by Programa;
    6. Only engage subcontractors to process Personal Data on its behalf pursuant to a written contract that requires comparable protections to this Data Processing Addendum. In the course of providing the Services, you acknowledge and hereby grant Programa general written authorisation to use subcontractors to Process the Personal Data. Programa’s use of any specific Subprocessor to process the Personal Data must be in compliance with US Data Protection Laws and must be governed by a contract between Programa and Subcontractor that requires comparable protections to this Data Processing Addendum. If Programa appoints a new subcontractor or intends to make changes concerning the addition or replacement of subcontractors, you will have seven (7) days from the date of the update to object to the change. In the event we do not receive a response from you, the change will be deemed to be accepted. If you object to the appointment of a subcontractor you may terminate this agreement in accordance with the Terms of Service, if applicable.
    7. Ensure that its personnel who process the Personal Data are subject to confidentiality obligations with respect to such information;
    8. Take reasonable and appropriate steps, upon reasonable written notice from you and subject to the confidentiality obligations set out in the Agreement, to assist you with confirming that Programa’s use of Personal Data is consistent with your obligations under US Data Protection Laws;
    9. Upon request, provide a report of a reasonable assessment of Programa’s policies and technical and organisational measures in support of its obligations under applicable US Data Protection Laws using an appropriate and accepted control standard or framework and assessment procedure for such assessments; and
    10. Upon termination of the Terms of Service, Programa will promptly initiate its purge process to delete or Deidentify the Personal Data.
  3. You represent and warrant that you:
    1. Have obtained any necessary consents, rights and authorisations and given any necessary notices to individuals regarding your disclosure of Personal Data to Programa to enable Programa’s processing of Personal Data to provide the Services, as required by applicable law;
    2. Will not share with Programa any Personal Data of any individual subject to the US Data Protection Laws who has exercised an opt-out that you have committed to honouring;
    3. Will not share with Programa sensitive data of any US User / Consumer who has not consented to the processing of their sensitive data;
    4. Inform Programa of any rights requests individuals make to you pursuant to US Data Protection Laws that Programa must comply with and provide the information necessary for Programa to comply with the requests; and
    5. Be solely liable for your compliance with such laws.
  4. You and Programa agree that the existence of this Addendum does not constitute an admission that sharing of Personal Data constitutes a Sale or a Share.

5. General

  1. In the event of any conflict or inconsistency between the provisions of the Terms of Service and this Addendum, the provisions of this Addendum shall prevail, unless such provisions contradict a requirement under applicable law, in which case such requirement shall prevail. For avoidance of doubt and to the extent allowed by applicable law, any and all liability under this Addendum, including limitations thereof, will be governed by the relevant provisions of the Agreement. You acknowledge and agree that Programa may amend this Addendum from time to time by posting the relevant amended and restated Addendum on Programa’s website, and such amendments to the Addendum are effective as of the date of posting. Your continued use of the Services after the amended Addendum is posted to Programa’s website constitutes your agreement to, and acceptance of, the amended Addendum. If you do not agree to any changes to the Addendum, do not continue to use the Service.
  2. Save as specifically modified and amended in this Addendum, all of the terms, provisions and requirements contained in the Agreement shall remain in full force and effect and govern this Addendum. If any provision of the Addendum is held illegal or unenforceable in a judicial proceeding, such provision shall be severed and shall be inoperative, and the remainder of this Addendum shall remain operative and binding on the parties.
  3. The terms of this Addendum shall be governed by and interpreted in accordance with the laws of the Australia applicable therein, without regard to principles of conflicts of laws. The parties irrevocably and unconditionally submit to the exclusive jurisdiction of the courts of Victoria, Australia with respect to any dispute or claim arising out of or in connection with this Addendum.

Appendix 1: Details of Processing

  • Nature and purpose of processing: To provide and improve the Services under the Programa Terms of Service and any other terms that this Addendum is incorporated into, provide any related support to Customer, as otherwise permitted under European Data Protection Laws or US Data Protection Laws, as applicable, or as initiated by you from time to time.
  • Subject Matter, Types of Personal Data and Categories of Data Subjects: Personal Data relating to Customers and Users.
  • Duration of processing: The term of this Addendum plus the period from the end of the term until deletion of all Customer and/or User Personal Data by Programa in accordance with its obligations under this Addendum.