This Data Processing Addendum (“DPA”) is in addition to, and forms part of, the Terms of Service and Privacy Policy between You, as a user of the Wink Reports service, and Wink Reports.‍

The terms “You”, “Your”, “Wink Reports”, “we”, “us”, “our” and “Service” are defined in our Privacy Policy. The terms “data controller”, “data processor”, “personal data” and “processing” shall be interpreted in accordance with the definition of these terms in the General Data Protection Regulation.‍

The purpose of this Data Processing Addendum (“DPA”) is to define the agreement between You and Wink Reports regarding the processing of personal and account data on Your behalf, and in connection with provision of the Service to You, in accordance with the requirements of the General Data Protection Regulation (“GDPR”). If you are not a Wink Reports user, or if the data being processed is not subject to the GDPR, this Data Processing Addendum is not applicable.‍

As part of providing the Service to You in accordance with our Privacy Policy and Terms of Service, Wink Reports may process personal and other data on Your behalf. The subject matter, duration, nature and purpose of this processing, as well as the types and categories of personal data, and many of Your rights and responsibilities, are described in our Privacy Policy.‍

In Your business relationship with Wink Reports, You are the data controller for personal data entered or imported into Your Wink Reports account, and Wink Reports is the data processor. You determine and control the collection, entry, use and retention of any personal and other data within your account. Wink Reports processes this data on Your behalf and as part of providing the Service, in accordance with Your instructions and Wink Reports' Privacy Policy and Terms of Service.‍

You acknowledge that You have direct responsibilities under the GDPR regarding how You use Wink Reports with the personal data of Your business, Your customers and others, and warrant to us that You will comply with Your obligations under the GDPR.

With regard to the processing of personal data submitted by You, Your employees or Your customers, for processing by Wink Reports, as part of Your use or interaction with the Service, You and Wink Reports agree that:

Wink Reports will process the personal data only in accordance with Your instructions and in accordance with our Privacy Policy and Terms of Service. You acknowledge that Your normal use of the Service may involve the transfer of personal and account data outside of the European Economic Area, as described in our Privacy Policy.

Wink Reports is committed to the confidentiality of Your information and account data, and will only process and disclose Your personal and other information to third parties for limited purposes (as described in our Privacy Policy). Wink Reports will ensure any personnel who access personal data as part of our processing services are aware and committed to the confidentiality of Your account data.
‍
Wink Reports implements and maintains appropriate technical and organizational measures designed to protect processed personal data against accidental or unlawful destruction or accidental loss, damage, alteration, unauthorized disclosure or access.
‍
Wink Reports engages sub-processors, as described in our Privacy Policy, as part of processing data on Your behalf and providing You with the Service, and You acknowledge that Wink Reports may engage new sub-processors for these purposes in future. Wink Reports takes measures to ensure such arrangements with sub-processors, and all processing activities, protect Your personal and account data to the standard required by this DPA and the GDPR.

In the event that Wink Reports engages other sub-processors for the above-mentioned purposes, Wink Reports will notify You. You may object in writing to such an appointment of a new sub-processor within five (5) calendar days of such notice, provided that the objection is based on reasonable grounds relating to data protection. In the event of an objection, we will discuss Your concerns with You in good faith with a view to achieving resolution. If a resolution is not possible, You may terminate Your use of the Service, subject to relevant provisions in our Terms of Service.
‍
Wink Reports will assist You (insofar as is possible and reasonable) to action requests from data subjects in exercising their data access and portability rights, and support Your compliance with Your own obligations as a data controller. Wink Reports reserves the right to reimbursement from You for the reasonable cost of any time, expenditure or fees incurred as part of providing such assistance.
‍
You may close Your Wink Reports account at any time. This will terminate Your access to the Service and result in the immediate deletion or anonymization of Your account data, including historic backups, being the primary data processed on Your behalf as part of the Wink Reports Service. However, note that Wink Reports may have a variety of obligations to retain some or all of Your personal data and other information for certain periods.
‍
Should Wink Reports become aware of any accidental, unauthorized or unlawful destruction, loss, alteration, disclosure, or breach of the personal data processed by Wink Reports on your behalf, if such a breach represents a risk to the rights and freedoms of natural persons, Wink Reports will notify You of the breach as soon as practicably possible.
‍
Should Wink Reports become aware that, in our opinion, an aspect of Your processing instructions or use of the Service represents an infringement of the principles or requirements of the GDPR, Wink Reports will inform You accordingly.

Contact

If you have any questions about Wink Reports and the GDPR, you can get in touch with us at support@winkreports.com