In short: if you use Wacdum for work and captures may contain other people’s personal data, this sets out how we process it for you. It applies automatically, so you don’t need to sign anything, though we’re happy to.
1. Roles
Where you use Wacdum in a business capacity and your captures contain personal data about other people, you are the controller and we are the processor of that data. For your own account details we are the controller. See our Privacy Policy.
This addendum forms part of our Terms of Service.
2. Scope of processing
- Subject matter: storing captures and serving them via share links.
- Duration: for as long as your account is open, plus the retention periods in our Privacy Policy.
- Nature and purpose: storage, transmission, and display of the content you upload.
- Types of data: whatever appears in your captures, plus the metadata we generate about them.
- Categories of people: anyone visible or identifiable in your captures.
3. Our obligations
- Process personal data only on your documented instructions, which include your use of the product’s features.
- Keep it confidential and ensure our staff are bound to do the same.
- Apply appropriate technical and organisational security measures, set out on our Security page.
- Use only the subprocessors listed on our Subprocessors page, under equivalent obligations, with 30 days’ notice of changes.
- Assist you with data subject requests, impact assessments, and regulator enquiries.
- Notify you without undue delay if we become aware of a personal data breach.
- Delete or return the data at the end of the engagement, subject to legal retention.
4. Your obligations
- Have a lawful basis for the personal data in your captures.
- Give the people concerned any notice the law requires.
- Not upload special-category data unless you have a valid basis to do so.
- Configure sharing appropriately, remembering that anyone with a share link can view the capture.
5. International transfers, audits, liability
Where processing occurs outside the UK/EEA we rely on Standard Contractual Clauses and technical safeguards. On reasonable written request we will provide the information you need to demonstrate our compliance; we may satisfy audit rights through documentation and third-party reports rather than on-site inspection.
Liability under this addendum is subject to the limitations in our Terms of Service. For a countersigned copy, email legal@wacdum.com.