Data Processing Agreement

1. Purpose

This Data Processing Agreement governs how XFunge processes personal data on behalf of clubs and organisations using the XFunge platform.

2. Definitions

Controller means the club or organisation determining the purposes and means of processing.

Processor means XFunge, which processes personal data on behalf of the Controller.

3. Roles and Responsibilities

The Controller is responsible for compliance with applicable privacy laws.

XFunge acts solely as a Data Processor and processes data only on documented instructions.

4. Nature of Processing

Processing includes hosting, storing, displaying, and securing digital memberships and tickets within the XFunge platform.

5. Types of Personal Data

Personal data may include names, contact details, member identifiers, and technical usage data as determined by the Controller.

6. Security Measures

XFunge implements appropriate technical and organisational security measures to protect personal data.

7. Subprocessors

XFunge may engage subprocessors subject to equivalent data protection obligations and remains responsible for their performance.

8. Data Subject Rights

XFunge assists the Controller in responding to data subject requests as required by law.

9. Personal Data Breaches

XFunge will notify the Controller without undue delay upon becoming aware of a personal data breach.

10. Data Retention and Deletion

Personal data is deleted or returned upon termination of services or upon instruction from the Controller, unless retention is required by law.

11. Audit and Compliance

XFunge will make information available to demonstrate compliance with this Agreement upon reasonable request.

12. Governing Law

This Agreement is governed by the laws specified in the primary services agreement between the parties.

13. Contact Information:

For privacy-related enquiries, contact:

Email: [email protected]

Websites: www.xfunge.com and www.xfunge.co.nz