1. Scope
This Addendum applies where Uranion EMEA Ltd processes personal data on behalf of a customer in connection with the Construens service, and forms part of the agreement between the parties.
2. Roles
The customer is the controller (or processor) and Uranion is the processor (or sub-processor) of the personal data it processes on the customer's documented instructions.
3. Details of processing
Subject matter, duration, nature and purpose of processing, and the types of personal data and categories of data subjects are as set out in the applicable order and the customer's use of the service.
4. Sub-processors
Uranion may engage sub-processors under written terms imposing equivalent obligations, and will make available a current list on request and notify the customer of intended changes.
5. Security
Uranion implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss or disclosure.
6. Data subject requests & breaches
Uranion will assist the customer in responding to data-subject requests and will notify the customer without undue delay after becoming aware of a personal-data breach.
7. International transfers
Any transfer of personal data outside its country of origin is made under appropriate safeguards such as standard contractual clauses.
8. Return or deletion
On termination Uranion will, at the customer's choice, delete or return the personal data, save where retention is required by law.