Data Processing Agreement

This Data Processing Agreement ("DPA") applies when a business customer ("Customer") uses Wizume and we process personal data on Customer's instructions under UK GDPR Article 28 and/or EU GDPR Article 28.

Customer is the controller for resume and applicant data entered by users under Customer's account. Wizume is the processor for that data, except where we act as controller for our own account administration, billing, security, and consented product analytics.

• Process personal data only on documented instructions from Customer.
• Ensure confidentiality of personnel with access.
• Implement appropriate technical and organisational security measures.
• Assist with data subject requests where feasible and required by law.
• Notify Customer without undue delay of personal data breaches affecting Customer data.
• Delete or return personal data on termination of services, subject to legal retention.

Customer authorises use of subprocessors listed in our Privacy Policy. We maintain a notification process for material changes (30 days' notice).

Where personal data is transferred outside the UK or EEA, we use UK International Data Transfer Agreements, EU Standard Contractual Clauses, or other valid transfer mechanisms.

For a countersigned DPA suitable for procurement, email legal@wizume.ai with your company details.