Data Processing Addendum for Organizations

1. This Page Is Not an Executed DPA

The ordinary Up4it service is a Member-facing social coordination service. For that service, The Corner Factory SA generally determines why and how personal data is processed and acts as a data controller under applicable data-protection law. A Member does not become a controller that instructs Up4it merely by creating a Mood or Moment or by using a Circle.

This page is therefore not a data processing agreement, does not appoint Up4it as a processor, and does not amend the Terms of Service.

2. When a Separate Addendum May Be Needed

An organization may need a signed data processing addendum if it purchases or uses a specific business feature under which Up4it processes personal data solely on the organization’s documented instructions. The applicable roles depend on the feature and actual processing, not on the label chosen by either party.

Where required, an executed addendum should address at least:

• the subject matter, duration, nature, and purpose of processing;
• the types of personal data and categories of data subjects;
• documented instructions and confidentiality;
• security measures and personal-data breach assistance;
• subprocessors and international transfers;
• assistance with data-subject requests and impact assessments;
• deletion or return of data at the end of the service; and
• audit information and the parties’ respective responsibilities.

3. Requesting an Addendum

No organization-specific processor service or standard addendum is currently offered through this Help Center. Before an organization uploads personal data on behalf of staff, members, customers, or other people, it should contact support@the-corner.io to confirm the parties’ roles and, if necessary, execute an appropriate agreement.

Our Privacy Policy governs Up4it’s own controller processing. Organizers must also follow the Participant Privacy Standards.