Data Processing Addendum
This Data Processing Addendum ("Addendum") forms part of the agreement ("Agreement") between the Customer ("you") and Jungleworks ("we", "us", or "our") regarding your use of Jungleworks products and services.
This Addendum applies where and to the extent that Jungleworks processes Personal Data on your behalf in the course of providing Services, and such Personal Data is subject to applicable Data Protection Laws, including the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the UK GDPR, or other relevant data privacy laws.
1. Definitions
For the purposes of this Addendum:
1.1 "Personal Data" means any information relating to an identified or identifiable natural person.
1.2 "Processing", "Data Subject", "Controller", "Processor", and "Supervisory Authority" have the meanings given in the GDPR.
1.3 "Customer Data" means Personal Data that you provide to Jungleworks in connection with the Services.
2. Roles and Scope
As between you and Jungleworks:
2.1 You act as the Controller of Customer Data.
2.2 Jungleworks acts as your Processor, processing Customer Data on your behalf and in accordance with your documented instructions.
3. Duration of Processing
Jungleworks will process Customer Data for the duration of the Agreement unless otherwise agreed upon or required by applicable law.
4. Purpose and Nature of Processing
Jungleworks processes Customer Data to:
4.1 Provide, maintain, and improve our services.
4.2 Ensure customer support, security, and service functionality.
4.3 Fulfill contractual obligations.
We do not process Customer Data for purposes other than those outlined in the Agreement or this Addendum.
5. Sub-processors
Jungleworks may engage sub-processors to help deliver the Services. Sub-processors are contractually bound to comply with obligations substantially similar to those in this Addendum.
We will provide advance notice of any changes to sub-processors to give you the opportunity to object where permitted by law.
Below is the current list of our sub-processors:
5.1 AWS
5.1.1 Purpose: Cloud Storage
5.1.2 location: Oregon, USA
5.2 JIRA
5.2.1 Purpose: Project Management
5.3 GitHub
5.3.1 Purpose: Code Repository
We will provide advance notice of any changes to sub-processors to give you the opportunity to object where permitted by law.
6. International Transfers
Where Customer Data is transferred outside the European Economic Area (EEA), the United Kingdom, or other jurisdictions with adequate protection, Jungleworks ensures such transfers are made in compliance with applicable Data Protection Laws, including by implementing Standard Contractual Clauses (SCCs) or other valid transfer mechanisms.
7. Security Measures
Jungleworks implements appropriate technical and organizational security measures to protect Customer Data, including:
7.1 Encryption of data in transit and at rest.
7.2 Access controls and authentication.
7.3 Regular security audits and assessments.
7.3 Incident response protocols.
8. Data Subject Rights
Jungleworks will, to the extent legally permitted, assist you in responding to requests from Data Subjects to exercise their rights under applicable Data Protection Laws, including:
8.1 Right to access
8.2 Right to rectification
8.3 Right to erasure
8.4 Right to data portability
8.5 Right to object or restrict processing
9. Data Breach Notification
Jungleworks will notify you without undue delay upon becoming aware of a Personal Data Breach affecting Customer Data. Our notification will include sufficient details to enable you to meet any legal obligations to report or inform Data Subjects.
10. Data Return or Deletion
Upon termination of the Agreement, Jungleworks will delete or return all Customer Data in our possession, unless we are required by law to retain it.
11. Audit Rights
Upon reasonable request, Jungleworks will provide you with information necessary to demonstrate our compliance with this Addendum. Where required by applicable law, you may conduct audits, including inspections, of Jungleworks’ data processing facilities and procedures, subject to confidentiality obligations and with prior notice.
12. Contact Information
If you have questions about this Addendum or our data processing practices, please contact:
Privacy Team Jungleworks: Email: privacy@jungleworks.com
13. Changes to This Addendum
We may update this Addendum from time to time to reflect changes in legal or regulatory requirements or our practices. We will notify you of any material changes in advance where required by law.
