Data Processing Addendum

This addendum applies when a Pro customer (“you”) uses Desyn to process personal data on behalf of an organisation, and forms part of the Terms of Service. You are the controller; Desyn is the processor.

What we process

• Subject matter: the personal data contained in designs, uploads, comments and account details of your team.
• Duration: for as long as you use the Service, plus up to 30 days for deletion.
• Purpose: only to provide the Service as you instruct through your use of it.

Our commitments

• We process personal data only on your documented instructions.
• Everyone with access is bound by confidentiality.
• We keep appropriate technical and organisational measures in place, described on our security page.
• We help you answer requests from data subjects and with impact assessments where needed.
• We tell you without undue delay after becoming aware of a personal data breach affecting your data.
• At the end of the Service we delete your data, or return it first if you ask.
• We make the information needed to show compliance available to you on request.

Subprocessors

You authorise the following subprocessors. We will tell you before adding or replacing one, so you can object.

International transfers

Where personal data leaves the European Economic Area, we rely on the EU Standard Contractual Clauses.

Signing

If your organisation needs a countersigned copy, email hello@desyn.app with your company details.