Data Processing Agreement

For personal data processed through the GoodWorker platform on behalf of customers, the customer acts as data controller and GoodWorker acts as data processor, unless otherwise specified in writing.

Processing is limited to what is necessary to provide, secure, maintain, and support the GoodWorker service.

Categories of personal data may include contact data, operational workflow data, uploaded documents, logs, and metadata, depending on customer use of the service.

GoodWorker processes data only on documented instructions from the customer, ensures confidentiality, implements reasonable security measures, and assists the customer in meeting applicable data protection obligations within the limits of the service.

GoodWorker may engage sub-processors for hosting, infrastructure, communications, support, analytics, or related operational needs, subject to appropriate contractual safeguards.

GoodWorker will notify the customer without undue delay after becoming aware of a personal data breach affecting customer data, where required by applicable law.

At the end of the services and subject to the applicable agreement, customer data will be deleted or returned, unless retention is required by law.

GoodWorker will provide reasonable information necessary to demonstrate compliance with its processor obligations, subject to confidentiality and operational constraints.