This Data Processing Agreement (“DPA”) is entered into between:

• Customer (“Controller”): The legal entity that has entered into the Service Agreement with Copyl and whose Users generate data in the platform.
• Copyl AB (“Processor”), a Swedish company providing the Copyl SaaS platform.

This DPA forms an integral part of the Service Agreement and governs the processing of personal data in connection with the Customer’s use of the Copyl services.

1. Roles and Responsibilities

1.1 The Controller determines the purposes and means of processing personal data entered into the Copyl platform by its employees, consultants, or other users.

1.2 The Processor shall process personal data only on documented instructions from the Controller and in accordance with this DPA.

1.3 The Processor shall ensure that persons authorized to process personal data are bound by confidentiality obligations.

2. Subject Matter and Duration

2.1 Subject matter: Processing of personal data generated by Users within the Customer’s tenant in the Copyl multitenant SaaS platform.

2.2 Duration: This DPA applies for as long as the Customer uses Copyl services or until all personal data is deleted or returned.

3. Nature and Purpose of Processing

The Processor provides a multitenant SaaS platform where Customer Users generate and manage content (e.g. time reports, activities, documents, sensor data). Processing is limited to hosting, storing, transmitting, and enabling the use of this data according to the Service Agreement.

4. Categories of Data and Data Subjects

• Data subjects: Customer employees, contractors, and other Users.
• Categories of data: Identification data (name, email), account data, content created by Users, sensor or log data, optional metadata.