[et_pb_section fb_built=”1″ _builder_version=”3.22″ global_colors_info=”{}”][et_pb_row _builder_version=”3.25″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”3.25″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.10.7″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” inline_fonts=”Abhaya Libre” global_colors_info=”{}”]<\/p>\n
<\/strong><\/p>\n <\/strong><\/p>\n Last revised:<\/strong> April 01, 2026<\/p>\n <\/p>\n This Data Processing Agreement and its possible annexes (hereinafter, the <\/span>\u201cDPA\u201d<\/b>) constitutes an addendum to the Terms and Conditions entered into between <\/span>Meetmaps<\/b> and the <\/span>Customer<\/b> for the licensing of software and associated services (the <\/span>\u201cAgreement\u201d<\/b>).<\/span><\/p>\n For the performance of the Agreement, Meetmaps may process personal data on behalf of the Customer. In this capacity, Meetmaps acts as the Data<\/span> PROCESSOR<\/b> and the Customer acts as the Data<\/span> CONTROLLER<\/b>.<\/span><\/p>\n This DPA governs the agreement between the parties regarding the processing of such data, in accordance with the recommendations of the General Data Protection Regulation (Regulation (EU) 2016\/679 of the European Parliament and of the Council), hereinafter <\/span>EU-GDPR<\/b>, which provides that the processing of personal data by a processor shall be governed by a contract or other legal act.<\/span><\/p>\n The Parties agree to comply with the following provisions regarding personal data. In the event of any discrepancy between the Spanish and English versions, the Spanish text shall prevail. If you have signed a specific version of this agreement, the following clauses do not apply to your case, and said variant shall prevail over these clauses.<\/span><\/p>\n By means of these clauses, the PROCESSOR is authorized to process, on behalf of the CONTROLLER, the personal data necessary to provide the following service: <\/span>Event management software license and services associated with its use.<\/b><\/p>\n The processing of personal data shall include the following operations:<\/span><\/p>\n \u2705 Collection<\/span><\/p>\n<\/td>\n \u2705 Recording<\/span><\/p>\n<\/td>\n<\/tr>\n \u2b1c Organization<\/span><\/p>\n<\/td>\n \u2b1c Structuring<\/span><\/p>\n<\/td>\n<\/tr>\n \u2b1c Storage<\/span><\/p>\n<\/td>\n \u2b1c Adaptation or alteration<\/span><\/p>\n<\/td>\n<\/tr>\n \u2b1c Retrieval<\/span><\/p>\n<\/td>\n \u2705 Consultation<\/span><\/p>\n<\/td>\n<\/tr>\n \u2705 Use<\/span><\/p>\n<\/td>\n \u2705 Disclosure by transmission \u2705 Dissemination<\/span><\/p>\n<\/td>\n \u2b1c Alignment<\/span><\/p>\n<\/td>\n<\/tr>\n \u2b1c Restriction<\/span><\/p>\n<\/td>\n \u2b1c Erasure<\/span><\/p>\n<\/td>\n<\/tr>\n \u2b1c Destruction<\/span><\/p>\n<\/td>\n <\/p>\n For the performance of the obligations derived from the fulfillment of the subject matter of this appointment, the CONTROLLER authorizes the PROCESSOR to process the necessary information, which includes the following categories of personal data:<\/span><\/p>\n <\/span><\/p>\n This agreement shall remain in effect for as long as the provision of services that motivates the formalization of the Agreement remains in force, plus any such further period as may be necessary to comply with legal obligations or to address potential liabilities, during which time the data shall remain restricted to any possible processing.<\/span><\/p>\n Upon termination of the Agreement, the PROCESSOR shall, at the choice of the CONTROLLER, return to the CONTROLLER or destroy the personal data and, where applicable, the media on which they are stored, once the provision of services has ended.<\/span><\/p>\n To this end, the CONTROLLER shall communicate its decision by means of a notification to the address indicated in Clause 9 (Notifications). In any event, the return must entail the total erasure of the existing data in the PROCESSOR\u2019s systems and documents.<\/span><\/p>\n However, the PROCESSOR may keep a copy, with the data duly blocked, for as long as liabilities may arise from the performance of the service.<\/span><\/p>\n 5.1 Purpose<\/b><\/p>\n The PROCESSOR shall use the personal data subject to processing only for the purpose of this appointment. Under no circumstances may it use the data for its own purposes.<\/span><\/p>\n 5.2 Instructions from the CONTROLLER<\/b><\/p>\n The PROCESSOR shall process the data in accordance with the CONTROLLER’s instructions.<\/span><\/p>\n If the PROCESSOR considers that any instruction infringes the EU-GDPR or any other European Union or Member State data protection provision, the PROCESSOR shall immediately inform the CONTROLLER.<\/span><\/p>\n 5.3 Record of processing activities<\/b><\/p>\n The PROCESSOR shall maintain a record of all categories of processing activities carried out on behalf of the CONTROLLER, unless it may rely on any of the exceptions under Article 30.5 of the GDPR.<\/span><\/p>\n 5.4 Non-disclosure: <\/b><\/p>\n The PROCESSOR shall not disclose the data to third parties, unless it has the express authorization of the CONTROLLER, in legally permissible cases.<\/span><\/p>\n The PROCESSOR may communicate the data to other processors of the same CONTROLLER, in accordance with the CONTROLLER’S instructions. In this case, the CONTROLLER shall identify, prior and in writing, the entity to which the data is to be communicated, the data to be communicated, and the security measures to be applied to proceed with the communication<\/span><\/p>\n 5.5 Subcontracting<\/b><\/p>\n The PROCESSOR may subcontract part of its responsibilities exclusively for the fulfillment of the subject matter of the appointment, in order to offer the highest technical, security, and service guarantees.<\/span><\/p>\n The PROCESSOR guarantees that any subcontractor shall have the status of data processor and shall be equally bound to comply with the obligations set forth in this document.<\/span><\/p>\n 5.6 Duty of Secrecy:<\/b><\/p>\n The PROCESSOR and all its personnel shall maintain a duty of secrecy with respect to the personal data to which they have had access by virtue of this appointment, even after its termination.<\/span><\/p>\n 5.7 Confidentiality Commitments:<\/b><\/p>\n The PROCESSOR guarantees that persons authorized to process personal data have committed themselves to confidentiality and to comply with the corresponding security measures.<\/span><\/p>\n 5.8 Training<\/b><\/p>\n The PROCESSOR shall guarantee the necessary training in personal data protection for the personnel authorized to process personal data.<\/span><\/p>\n 5.9 Assistance in the exercise of rights:<\/b><\/p>\n The PROCESSOR shall assist the CONTROLLER in responding to the exercise of rights of:<\/span><\/p>\n When the data subjects exercise their rights of access, rectification, erasure and objection, restriction of processing, data portability, and the right not to be subject to automated individual decision-making before the PROCESSOR, the latter must communicate it by email to the CONTROLLER at the address indicated in Clause 9 (Notifications). This communication must be made immediately on the next business day following the receipt of the request, together with, where applicable, any other information that may be relevant to resolve the request.<\/span><\/p>\n 5.10 Right to information:<\/span><\/b><\/p>\n It is the responsibility of the CONTROLLER to provide the right to information at the time of data collection.<\/span><\/p>\n 5.11 Notification of security breaches:<\/b><\/p>\n <\/b><\/p>\n The PROCESSOR shall notify the CONTROLLER within a maximum period of 12 hours of becoming aware of any personal data security breaches, together with all relevant information.<\/span><\/p>\n Aqu\u00ed tienes la traducci\u00f3n profesional al ingl\u00e9s de esta secci\u00f3n, siguiendo la terminolog\u00eda legal del RGPD y manteniendo la coherencia con las cl\u00e1usulas anteriores:<\/span><\/p>\n 5.11.1 Notification of Security Breaches<\/b> Communication to the Controller:<\/b><\/p>\n PROCESSOR shall notify the CONTROLLER within a maximum period of 12 hours from becoming aware of it, of any personal data security breaches under its responsibility, together with all relevant information. At a minimum, the following information shall be provided:<\/span><\/p>\n If it is not possible to provide the information simultaneously, and to the extent that it is not, the information shall be provided gradually without undue delay.<\/span><\/p>\n The PROCESSOR shall make this communication via email marked as URGENT to the address indicated in Clause 9 (Notifications).<\/span><\/p>\n 5.11.2 Communication to the Data Protection Authorities: <\/strong><\/p>\n The CONTROLLER is responsible for communicating data security breaches to the Data Protection Authority.<\/span><\/p>\n 5.11.3 Communication to the Data Subjects: <\/strong><\/p>\n The CONTROLLER is responsible for communicating data security breaches to the data subjects, when necessary. The PROCESSOR shall provide the necessary support so that the CONTROLLER can carry out said communication in the shortest possible time.<\/span><\/p>\n 5.12 Support in carrying out data protection impact assessments:<\/b><\/p>\n The PROCESSOR shall support the CONTROLLER in carrying out data protection impact assessments, where appropriate.<\/span><\/p>\n 5.13 Support in conducting prior consultations with supervisory authorities:<\/b><\/p>\n The PROCESSOR shall support the CONTROLLER in conducting prior consultations with the supervisory authority, where appropriate.<\/span><\/p>\n 5.14 Compliance with obligations: <\/b><\/p>\n The PROCESSOR shall make available to the CONTROLLER all information necessary to demonstrate compliance with its obligations, as well as to allow for audits or inspections conducted by the CONTROLLER or another auditor authorized by them.<\/span><\/p>\n 5.15 Security measures:<\/b><\/p>\n The PROCESSOR shall periodically (and whenever there are significant changes to its software and hardware infrastructure) perform an information security risk assessment, which will result in the implementation of mechanisms appropriate to the detected risks, as described in Article 32 of the GDPR and, specifically:\u00a0<\/span><\/p>\n 5.16 Data Protection Officer:<\/b><\/p>\n The contact email address for the PROCESSOR’S Data Protection Officer is as follows: dpo@meetmaps.com<\/span><\/p>\n The CONTROLLER is responsible for:<\/span><\/p>\n Both the CONTROLLER and the PROCESSOR shall be liable for all damages caused to the other party in all cases of negligent or wrongful conduct in the fulfillment of their respective obligations, in accordance with the provisions of this agreement.<\/span><\/p>\n Neither party shall assume any liability for the non-execution or delay in the execution of any of the obligations under this agreement if such failure or delay results from or is a consequence of a case of force majeure or unforeseeable circumstances, admitted as such by Jurisprudence, in particular: natural disasters, war, state of siege, public order disturbances, transport strikes, power supply cuts, or any other exceptional measure adopted by administrative or governmental authorities<\/span><\/p>\n The PROCESSOR guarantees that it will maintain the strictest confidentiality and express compliance with the duty of professional secrecy regarding the CONTROLLER\u2019S affairs during the term of the service provision and indefinitely after its termination.<\/span><\/p>\n During and after the term of the Agreement, the PROCESSOR shall treat all information owned by the CONTROLLER as strictly confidential, taking the necessary measures to ensure its content is not disclosed to third parties, and that third parties cannot access it without the CONTROLLER\u2019S express authorization.<\/span><\/p>\n Unless confidentiality is regulated in another express agreement, confidential information shall be considered all information capable of being disclosed between the CONTROLLER and the PROCESSOR orally, in writing, or by any other medium or support, tangible or intangible, currently known or invented in the future, whether exchanged as a consequence of this contractual relationship or designated as confidential by one party to the other.<\/span><\/p>\n Any notification required for the purposes of this DPA shall be made in writing to the following attention and address:<\/span><\/p>\n DATA PROCESSOR<\/b><\/p>\n Name:<\/strong> Data Protection Officer DATA CONTROLLER<\/b><\/p>\n The addresses associated as signatories of the Agreement and those assigned as “Superadmin” in the Customer’s account within the Meetmaps platform.<\/span><\/p>\n <\/span><\/p>\n This contract contains the entire agreement between the parties regarding data processing and supersedes and replaces any prior agreement, whether verbal or written, reached by the parties.\u00a0<\/span><\/p>\n Furthermore, in the event of a contradiction between the conditions stipulated in this agreement and any other previously signed between both parties, the provisions of this agreement shall prevail.\u00a0<\/span><\/p>\n Any modification to the content of this agreement shall only be effective if made in writing and with the consent of both parties.\u00a0<\/span><\/p>\n<\/h4>\n
\n
<\/h4>\n
\n\n
\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
<\/span><\/p>\n<\/td>\n<\/tr>\n\n \n \n \n \n \n \n \n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n \n
\n
<\/span><\/li>\n<\/ul>\n\n
<\/h4>\n
<\/h4>\n
\n
<\/h4>\n
<\/h4>\n
\n
<\/h4>\n
<\/h4>\n
<\/h4>\n
<\/h4>\n
<\/h4>\n
<\/h4>\n
<\/h4>\n
<\/h4>\n
\n
<\/h4>\n
<\/h4>\n
\n
<\/h4>\n
<\/h4>\n
<\/h4>\n
<\/h4>\n
<\/h4>\n
\n
<\/h4>\n
<\/h4>\n
\n
<\/h4>\n
\n
<\/ol>\n
<\/h4>\n
\n
<\/h4>\n
<\/h4>\n
\n
<\/h4>\n
<\/h4>\n
\n
<\/h4>\n
<\/h4>\n
<\/span>Contact Email:<\/strong> dpo@meetmaps.com<\/span><\/p>\n<\/h4>\n
<\/h4>\n
\n