If you’re based in the EU or UK, the GDPR says you must protect that data when it’s sent outside your country. We do this by using the EU Standard Contractual Clauses (SCCs) and the UK Addendum. These legal agreements help make sure your data stays protected, even when it’s transferred internationally.
Zanda has already taken care of this for you. Because we process data on your behalf, the SCCs and UK Addendum are included in our Global Data Processing Agreement (DPA), which is part of our Terms of Use. They apply automatically when you start using Zanda and stay in place for as long as you have a subscription.
If you have any questions about this, please let us know.
Extracted PDF: d02adfc275d5966a.pdf
Zanda Global Data Processing Agreement (“DPA”) This Global Data Processing Agreement (“DPA”) is an agreement between you and the entity you represent (collectively referred to as “Customer,” “you,” or “your”) and Zanda Health Pty Ltd (“Zanda”, “we”, “us”, or “our”). This DPA supplements the Zanda Platform Terms of Use (“Terms of Use”) and governs the Processing of Personal Data by Zanda on behalf of the Customer in connection with the Customer’s use of the Services. The following appendices are attached and are an integral part of this DPA. Each appendix applies as required by the Customer’s local regulations: ● APPENDIX I – EU STANDARD CONTRACTUAL CLAUSES: CONTROLLER TO PROCESSOR: Governs the transfer of Personal Data from the EU to Zanda as a data processor in compliance with EU data protection laws. ● APPENDIX II – UK INTERNATIONAL DATA TRANSFER ADDENDUM TO THE EU COMMISSION STANDARD CONTRACTUAL CLAUSES: Provides additional safeguards and terms for data transfers from the UK to Zanda in compliance with UK data protection laws. ● APPENDIX III – US HIPAA BUSINESS ASSOCIATE AGREEMENT: Outlines Zanda’s obligations as a Business Associate when handling Protected Health Information (PHI) under the US Health Insurance Portability and Accountability Act (HIPAA). By accessing or using the Services you acknowledge that you have read, understood, and agree to be bound by this DPA. This DPA becomes effective upon your subscription to the Services and remains in effect for the duration of your subscription. All capitalised terms used in this DPA will have the meanings given to them in Section 14 of this DPA.
Docusign Envelope ID: C257CC82-01E9-4DA0-A39D-6D53E07FCEF2
1. Details of Data Processing 1.1. Scope and Roles This DPA applies to Processing Customer Data to provide the Services. Zanda acts as the Data Processor on behalf of the Customer, the Data Controller. 1.2. Data Processing Activities 1.2.1. Subject Matter: The…