{"id":15385,"date":"2025-03-04T14:00:09","date_gmt":"2025-03-04T20:00:09","guid":{"rendered":"https:\/\/ovationup.com\/privacy-policy-copy\/"},"modified":"2025-03-04T14:02:10","modified_gmt":"2025-03-04T20:02:10","slug":"data-processing-agreement","status":"publish","type":"page","link":"https:\/\/ovationup.com\/data-processing-agreement\/","title":{"rendered":"Data Processing Agreement"},"content":{"rendered":"<div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-1 fusion-flex-container nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"background-color: rgba(255,255,255,0);background-position: center center;background-repeat: no-repeat;border-width: 0px 0px 0px 0px;border-color:#e2e2e2;border-style:solid;\" ><div class=\"fusion-builder-row fusion-row fusion-flex-align-items-flex-start fusion-flex-justify-content-center\" style=\"max-width:1248px;margin-left: calc(-4% \/ 2 );margin-right: calc(-4% \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-0 fusion_builder_column_3_4 3_4 fusion-flex-column\"><div class=\"fusion-column-wrapper fusion-flex-justify-content-flex-start fusion-content-layout-column\" style=\"background-position:left top;background-blend-mode: overlay;background-repeat:no-repeat;-webkit-background-size:cover;-moz-background-size:cover;-o-background-size:cover;background-size:cover;padding: 0px 0px 0px 0px;\"><div class=\"fusion-text fusion-text-1\"><p><strong>Data Processing Agreement<\/strong><\/p>\n<p><span style=\"font-weight: 400;\">This Data Processing Agreement (\u201cDPA\u201d) forms part of the <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> Terms of Service, or another agreement governing the use of <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> (\u201c<\/span><b>Agreement<\/b><span style=\"font-weight: 400;\">\u201d) entered into by and between you, the Client (as defined in the Agreement) (collectively, \u201cyou\u201d, \u201cyour\u201d, \u201c<\/span><b>Client<\/b><span style=\"font-weight: 400;\">\u201d), and <\/span><b>OVATION UP, INC<\/b><span style=\"font-weight: 400;\"> (\u201c<\/span><b>Ovation<\/b><span style=\"font-weight: 400;\">\u201d, \u201cus\u201d, \u201cwe\u201d, \u201cour\u201d) to reflect the parties\u2019 agreement regarding the Processing of Personal Data by <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> solely on behalf of the <\/span><b>Client<\/b><span style=\"font-weight: 400;\">. Both parties shall be referred to as the \u201c<\/span><b>Parties<\/b><span style=\"font-weight: 400;\">\u201d and each as a \u201c<\/span><b>Party<\/b><span style=\"font-weight: 400;\">.\u201d Capitalized terms not defined herein shall have the meanings assigned to such terms in the Agreement.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This DPA is valid only for our European customers. If you are not located in Europe, please contact us directly to receive the appropriate Data Processing Agreement for your region, where applicable. <\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">In the event of any conflict between certain provisions of this DPA and the provisions of the Agreement, the provisions of this DPA shall prevail solely with respect to the Processing of Personal Data.<\/span><\/p>\n<p><b>HOW TO EXECUTE THIS DPA:<\/b><b>\u00a0<\/b><\/p>\n<p><span style=\"font-weight: 400;\">By utilizing our Services, the Client acknowledges and accepts this Data Processing Agreement (DPA), and you affirm that you possess full authority to legally bind the Client to the terms outlined in this DPA. If you are unable or unwilling to comply with and be bound by this DPA, or lack the requisite authority to bind the Client or any other entity, we kindly request that you refrain from providing Personal Data to us. Should you require a signed copy of this DPA, please contact <\/span><a href=\"mailto:dsr@ovationup.com\"><span style=\"font-weight: 400;\">dsr@ovationup.com<\/span><\/a><span style=\"font-weight: 400;\">, and we will promptly furnish you with one.<\/span><\/p>\n<ul>\n<li aria-level=\"1\"><b>Definitions\u00a0<\/b><\/li>\n<\/ul>\n<p><b>Ovation <\/b><span style=\"font-weight: 400;\">refers to the company that is a party to this DPA. It is organized under the laws of Delaware, United States, and has its head office located at 833 W 1800 N, Mapleton, UT 84664, USA.<\/span><\/p>\n<p><b>Ovation Group <\/b><span style=\"font-weight: 400;\">means Ovation and its Affiliates engaged in the Processing of Personal Data.<\/span><\/p>\n<p><b>Affiliate <\/b><span style=\"font-weight: 400;\">refers to any entity that directly or indirectly controls, is controlled by, or is under common control with Ovation. In this context, &#8216;Control&#8217; signifies the direct or indirect ownership or control of more than 50% of the voting interests of the subject entity.<\/span><\/p>\n<p><b>Applicable Data Protection Law<\/b><span style=\"font-weight: 400;\">\u00a0means all laws, regulations, and other legal requirements relating to (i) privacy, data security, consumer protection, marketing, promotion, and text messaging, email, and other communications; (ii) the use, collection, retention, storage, security, disclosure, transfer, disposal, and other processing of Personal Data applicable to the processing of Client Personal Data under the Agreement including but not limited to General Data Protection Regulation 2016\/679 (\u201c<\/span><b>GDPR\u201d<\/b><span style=\"font-weight: 400;\">), Federal Data Protection Act of 19 June 1992 (Switzerland), UK Data Protection Act 2018 and UK General Data Protection Regulation (<\/span><b>UK GDPR<\/b><span style=\"font-weight: 400;\">); and binding guidance and \/ or codes of practice issued by a competent supervisory authority under applicable laws (as defined in the GDPR), or the European Data Protection Board.\u00a0<\/span><\/p>\n<p><b>Business Contact Information<\/b><span style=\"font-weight: 400;\">\u00a0means the names, mailing addresses, email addresses, and phone numbers regarding the other Party\u2019s employees, directors, vendors, agents and customers, maintained by a Party for business purposes as further described below.<\/span><\/p>\n<p><b>Client Personal Data\u00a0<\/b><span style=\"font-weight: 400;\">means Client-owned or controlled personal data provided by or on Your behalf to <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> or an <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> affiliate or subcontractor for processing under Applicable Data Protection Law pursuant to the Agreement. Unless prohibited by Applicable Data Protection Law, Client Personal Data shall not include information or data that is anonymized, aggregated, de-identified and\/or compiled on a generic basis and which does not name or identify a specific person.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u201c<\/span><b>Controller\u201d<\/b><span style=\"font-weight: 400;\">, \u201c<\/span><b>Consent\u201d<\/b><span style=\"font-weight: 400;\">, \u201c<\/span><b>Processor\u201d<\/b><span style=\"font-weight: 400;\">, \u201c<\/span><b>Sub-Processor\u201d<\/b><span style=\"font-weight: 400;\">, \u201c<\/span><b>Data Subject\u201d<\/b><span style=\"font-weight: 400;\">, \u201c<\/span><b>Personal Data\u201d<\/b><span style=\"font-weight: 400;\">, \u201c<\/span><b>Processing<\/b><span style=\"font-weight: 400;\">\u201d, \u201c<\/span><b>Public Authority\u201d<\/b><span style=\"font-weight: 400;\">, \u201c<\/span><b>Supervisory Authority<\/b><span style=\"font-weight: 400;\"> or similar terms shall have the meaning given under Applicable Data Protection Law. For the purposes of this Addendum Processor shall mean <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\">.<\/span><\/p>\n<p><b>Personal Data Breach\u00a0<\/b><span style=\"font-weight: 400;\">means an actual, confirmed breach of security of Client Personal Data that results in the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to such Client Personal Data transmitted, stored or otherwise processed by a Party under the terms of the Agreement.<\/span><\/p>\n<p><b>Standard Contractual Clauses\u00a0<\/b><span style=\"font-weight: 400;\">means: (i) where the GDPR applies the contractual clauses annexed to the European Commission\u2019s Implementing Decision 2021\/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016\/679 of the European Parliament and of the Council (the \u201c<\/span><b>EU SCCs<\/b><span style=\"font-weight: 400;\">\u201d); (ii) where the UK GDPR applies, the applicable standard data protection clauses adopted pursuant to Article 46(2)(c) or (d) of the UK GDPR (the \u201c<\/span><b>UK SCCs<\/b><span style=\"font-weight: 400;\">\u201d); and (iii) where the Swiss DPA applies, the applicable standard data protection clauses issued, approved or otherwise recognized by the Swiss Federal Data Protection and Information Commissioner (\u201c<\/span><b>FDPIC<\/b><span style=\"font-weight: 400;\">\u201d)(the \u201c<\/span><b>Swiss SCCs<\/b><span style=\"font-weight: 400;\">\u201c).<\/span><\/p>\n<p><b>UK GDPR<\/b><span style=\"font-weight: 400;\">\u00a0means Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27th April 2016 on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data (General Data Protection Regulation) as it forms part of the law of England and Wales, Scotland and Northern Ireland by virtue of Section 3 of the European Union (Withdrawal) Act 2018 and as amended by subsequent legislation.<\/span><\/p>\n<p><b>UK SCCs Addendum<\/b><span style=\"font-weight: 400;\">\u00a0means the standard contractual clauses addendum issued by the UK Secretary of State for the transfer of Personal Data outside the UK and any amendment or replacement of such standard contractual clauses pursuant to Article 46(5) of the GDPR.<\/span><\/p>\n<ul>\n<li aria-level=\"1\"><b>Representations and Warranties<\/b><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">2.1 Each Party represents and warrants that it will comply with the requirements of Applicable Data Protection Law as applicable to such Party with respect to the processing of the Client Personal Data.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">2.2 Each Party warrants and represents it has no reason to believe that the Data Protection Law prevents it from providing or receiving any services under the Agreement; and<\/span><\/p>\n<p><span style=\"font-weight: 400;\">2.3 Each Party warrants and represents it has the corporate power and capacity to perform its obligations under this Addendum<\/span><\/p>\n<p><span style=\"font-weight: 400;\">2.4 You represent and warrant to <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> that:<\/span><\/p>\n<p><span style=\"font-weight: 400;\">2.4.1 You shall comply with and provide all of your obligations under this Addendum in accordance with best industry practice;\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">2.4.2 You have no reason to believe that Applicable Data Protection Law prevents You from entering into this Addendum or fulfilling any of Your obligations under this Agreement;\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">2.4.3 You have all necessary authorisations to enable or entitle You to enter into this Addendum, including but not limited to instructions, notices, licenses and consents, and that these have been obtained and are in full force and effect and will remain in such force and effect at all times during the subsistence of this Addendum;\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">2.4.4 You shall only provide processing instructions that are lawful and You shall have sole responsibility for the accuracy, quality, and legality of Client Personal Data and the means by which it was acquired;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">2.4.5 neither the execution and delivery of this Addendum nor Your performance of any of Your obligations hereunder violates any (a) law to which You are subject; (b) judgment or order by which You are bound; (c) constitution or other equivalent constituting documents; or (d) other agreement or instrument which is binding on You or Your assets; and<\/span><\/p>\n<p><span style=\"font-weight: 400;\">2.5 Prior to transmitting Client Personal Data to <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\">, You shall inform <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> of any requirements pertaining to the transmitted Client Personal Data.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">2.6 <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> represents and warrants to You that:\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">2.6.1 it will process the Client Personal Data (as set out in\u00a0<\/span><b>Appendix A<\/b><span style=\"font-weight: 400;\">) only in accordance with your documented processing instructions which may be given from time to time (including as set forth in the Agreement and this Addendum), save as otherwise required by law. The Parties agree that the Agreement and this Addendum, along with the Client\u2019s configuration of or any use of any settings, features, or options in the services (as the Client may be able to modify from time to time) constitute the Client\u2019s complete and final instructions to <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> in relation to the processing of Client Personal Data (including for the purposes of the SCCs), and processing outside the scope of these instructions (if any) shall require prior written agreement between the Parties. For the avoidance of doubt, the Client acknowledges and agrees that the documented instructions include the processing of Client Personal Data for the purposes of providing, supporting, and improving <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> services (including to provide insights and other reporting).<\/span><\/p>\n<p><span style=\"font-weight: 400;\">2.6.2 it will promptly notify You if <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> determines that Your processing instruction violates any Applicable Data Protection Law (provided that nothing herein shall require <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> to provide legal or regulatory advice or monitor Applicable Data Protection Law as they apply to You).\u00a0<\/span><\/p>\n<ul>\n<li aria-level=\"1\"><b>Disclosure and Processing of Client Personal Data<\/b><span style=\"font-weight: 400;\">\u00a0<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">3.1 When providing or making available Client Personal Data to <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\">, You shall only disclose or transmit Client Personal Data that is necessary for <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> to perform the applicable services under the Agreement.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">3.2 Following expiration or termination of the provision of services under the Agreement and relating to the processing of Client Personal Data, <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> shall provide you a reasonable opportunity (of at least thirty (30) days) to retrieve or export Client Personal Data. After this retrieval window, <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> shall promptly and securely delete or destroy all Client Personal Data (including existing copies) in its possession or control, unless otherwise required or permitted by applicable laws to retain such data.<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">If you request data deletion prior to the end of the thirty (30) day retrieval window, <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> shall destroy all remaining Client Personal Data upon such request, provided no other legal obligations require its retention.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">3.3 All <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> personnel, including subcontractors, authorized to process the Client Personal Data shall be subject to confidentiality obligations and\/or subject to an appropriate statutory obligation of confidentiality.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">3.4 You expressly acknowledge and agree that, in the course of providing the services, <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> may anonymize, aggregate, and\/or otherwise de-identify Client Personal Data (\u201c<\/span><b>De-Identified Data<\/b><span style=\"font-weight: 400;\">\u201d) and subsequently use and\/or disclose such De-Identified Data for the purpose of research, benchmarking, improving <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\">\u2019s offerings generally, or for another business purpose authorized by Applicable Data Protection Law provided that <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> has implemented technical safeguards and business processes designed to prevent the re-identification or inadvertent release of the De-Identified Data.\u00a0<\/span><\/p>\n<ul>\n<li aria-level=\"1\"><b>Security Measures<\/b><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">4.1 <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> shall maintain appropriate technical and organizational measures, including its SOC 2 Type 2 certification, to protect the security, confidentiality, and integrity of Client Personal Data, including protection against unauthorized or unlawful Processing, accidental or unlawful destruction, loss, alteration, or damage, and unauthorized disclosure or access. <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> will not materially decrease the overall security of the Services during the subscription term. Such measures may include, but are not limited to, encryption in transit and at rest, access controls, vulnerability management, employee security training, logging and monitoring, and regular penetration testing.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">4.2 <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> regularly reviews and may update or modify these technical and organizational measures to account for technological developments and evolving industry standards, ensuring that the Processing of Client Personal Data is performed in accordance with this Addendum and Applicable Data Protection Law.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">4.3 Personal Data Breach. If <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> becomes aware of an actual or suspected Personal Data Breach of Client Personal Data, <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> will notify You without undue delay and provide relevant information, assistance, and cooperation to investigate and mitigate the breach and fulfill Your breach notification obligations under Applicable Data Protection Law.<\/span><\/p>\n<ul>\n<li aria-level=\"1\"><b>Audits and Inspections<\/b><span style=\"font-weight: 400;\">\u00a0<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Upon written request, <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> shall make available to You, no more than once annually and strictly at your own cost, information reasonably necessary to demonstrate <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\">\u2019s compliance with its obligations under this Addendum and Applicable Data Protection Law. You shall be solely responsible for determining whether the Services and <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\">\u2019s Security Measures will meet your needs, including with respect to any Data Protection Laws.<\/span><\/p>\n<ul>\n<li aria-level=\"1\"><b>Data Subject and Supervisory Authority Requests<\/b><span style=\"font-weight: 400;\">\u00a0<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">To the extent required under Applicable Data Protection Law and taking into account the nature of the services provided, <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> shall:<\/span><\/p>\n<p><span style=\"font-weight: 400;\">6.1 Data Subject Requests. Taking into account the nature of the services provided, <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> shall:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Notify You in writing within five (5) business days of receiving any request by a data subject to exercise his or her rights under Applicable Data Protection Law, unless otherwise prohibited by law.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Refrain from responding to such requests directly, unless legally required to do so, and instead follow Your reasonable and lawful instructions regarding how to address the request.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Provide reasonable assistance to You, at Your expense, to enable You to comply with any such request as required under Applicable Data Protection Law, provided that You supply all information or context necessary for <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> to fulfill the request.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">6.2 Supervisory Authority Requests. <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> shall notify You of all enquiries or communications from a competent supervisory authority relating to Client Personal Data processed under this Addendum, unless prohibited by law or by the relevant supervisory authority. You shall be responsible for all communications or correspondence with the competent supervisory authority in relation to Your role as Controller.<\/span><\/p>\n<ul>\n<li aria-level=\"1\"><b>Data Protection Impact Assessments\u00a0and Prior Consultation<\/b><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">7.1 To the extent required by Applicable Data Protection Law and taking into account the nature of the services provided and the information available to <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\">, <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> shall provide reasonable assistance to You, upon written request, to conduct any data protection impact assessment or transfer impact assessment regarding the Processing of Client Personal Data, including any required consultations with the relevant supervisory authority.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">7.2 <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> shall only be required to provide information or documentation reasonably necessary for such assessments where <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> holds such information and it is not otherwise available to You. Any additional support beyond the standard compliance measures under this Addendum may be subject to separate fees or charges, to be agreed upon by the Parties.<\/span><\/p>\n<ul>\n<li aria-level=\"1\"><b>Subprocessors<\/b><span style=\"font-weight: 400;\">\u00a0<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">8.1 Authorization. You hereby authorize <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> to engage Subprocessors. The current list of <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\">\u2019s Subprocessors, including their respective processing locations and services, is available at: [<\/span><a href=\"https:\/\/docs.google.com\/document\/d\/12W6jkSwfVbgNj3ihffihFJIiFo6YENHY\/edit#bookmark=id.30j0zll\"><span style=\"font-weight: 400;\">Subprocessors List<\/span><\/a><span style=\"font-weight: 400;\">]. Client may subscribe to notifications of new or replacement Subprocessors via instructions provided at that page (or as otherwise communicated by <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\">).<\/span><\/p>\n<p><span style=\"font-weight: 400;\">8.2 <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> shall provide at least ten (10) business days\u2019 notice before appointing any new Subprocessor or replacing an existing Subprocessor. You may object to any new Subprocessor on reasonable grounds relating to data protection within the notice period.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">8.3 If You reasonably object to a new Subprocessor, the Parties shall cooperate in good faith to find a mutually acceptable resolution. If no resolution is feasible, <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> shall not be obligated to provide the specific service(s) for which the Subprocessor is engaged, and the Parties shall make appropriate adjustments to the services and associated fees as needed.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">8.4 <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> shall ensure each Subprocessor is subject to obligations regarding the protection of Client Personal Data that are no less onerous than those set forth in this Addendum, including any relevant Standard Contractual Clauses if required by Applicable Data Protection Law.<\/span><\/p>\n<ul>\n<li aria-level=\"1\"><b>Transfers<\/b><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">9.1 Transfers of EEA\/Swiss Data. Where the GDPR or Swiss DPA applies to the Processing of Client Personal Data, <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> will not transfer Client Personal Data out of the EEA or Switzerland to a country that has not been identified as providing an adequate level of protection unless <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> has ensured appropriate safeguards via the Standard Contractual Clauses approved by the European Commission or other valid transfer mechanism under Applicable Data Protection Law.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">9.2 Transfers of UK Data. Where the UK GDPR applies, the Parties shall rely on either (i) the combination of the EU SCCs with the \u201cUK Addendum to the EU Commission SCCs\u201d or (ii) the International Data Transfer Agreement (IDTA), in each case as amended from time to time. You, acting as data exporter, shall execute or procure the execution of such documentation with <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> or any relevant <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> entity as necessary to lawfully transfer Client Personal Data from the UK to third countries.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">9.3 No Reliance on EU\u2013U.S. Data Privacy Framework (DPF). On July 10, 2023, the European Commission adopted an adequacy decision for the EU\u2013U.S. DPF. <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> does not currently rely on or participate in the DPF. Instead, <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> continues to rely on SCCs (and, where applicable, the UK Addendum or IDTA) for EU\u2013U.S. and UK\u2013U.S. transfers. If <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> later chooses to self-certify under the DPF, it will notify You and update this Addendum as necessary.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">9.4 Transfers of non-EEA\/Swiss\/UK Data. For transfers of Client Personal Data originating outside the EEA, Switzerland, or the UK, the Parties shall implement any additional or alternative data transfer mechanisms or measures required by Applicable Data Protection Law in the originating jurisdiction.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">9.5 Transfer Mechanism Changes. If any transfer mechanism (including the SCCs or any UK transfer solution) is invalidated, amended, or replaced, or if additional safeguards are required by Applicable Data Protection Law, the Parties shall work together in good faith to promptly adopt an alternative, valid transfer mechanism or to implement supplementary measures. Any impacts on the terms of the Agreement caused by such new requirements will be addressed in accordance with Section 15 (Changes in Laws).<\/span><\/p>\n<p>&nbsp;<\/p>\n<ul>\n<li aria-level=\"1\"><b>Use of Business Contact Information<\/b><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Each Party consents to the other Party using its Business Contact Information for contract management, payment processing, service offering, and business development purposes, including business development with partners, and such other purposes as set out in the using Party\u2019s data privacy policy (copies of which shall be made available upon request). For such purposes, and notwithstanding anything else set forth in the Agreement or this Addendum with respect to Client Personal Data in general, each Party shall be considered an independent Controller with respect to the other Party\u2019s Business Contact Information and shall be entitled to transfer such information to any country where such Party\u2019s global organization operates.\u00a0<\/span><\/p>\n<ul>\n<li aria-level=\"1\"><b>\u00a0Disclaimer of Liability<\/b><\/li>\n<\/ul>\n<p><b>Ovation<\/b><span style=\"font-weight: 400;\"> will not be liable for any claim brought by a data subject arising from or related to <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> or its Affiliates action or omission to the extent that <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> was acting in accordance with Your instructions.\u00a0<\/span><\/p>\n<ul>\n<li aria-level=\"1\"><b>Governing Terms<\/b><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">12.1 This Addendum represents the entire agreement between the Parties in relation to its subject-matter and all previous representations, agreements and statements are hereby excluded.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">12.2 For avoidance of doubt and without prejudice to the rights of any data subjects thereunder, this Addendum<\/span><b>\u00a0<\/b><span style=\"font-weight: 400;\">and any Standard Contractual Clauses (or other data transfer agreements) that the Parties or their affiliates may enter into in connection with the services provided pursuant to the Agreement will be considered part of the Agreement and the liability terms set forth in the Agreement will apply to all claims arising thereunder.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">12.3 In the event of any conflict or ambiguity between terms of this Addendum and terms of the Agreement, the terms of the Addendum shall prevail. In the event of any conflict or ambiguity between terms of this Addendum and terms of the Standard Contractual Clauses, the terms of the Standard Contractual Clauses shall prevail. All other terms and conditions within the Agreement remain unchanged and in full force and effect.<\/span><\/p>\n<ul>\n<li aria-level=\"1\"><b>\u00a0Severability<\/b><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Each and every provision of this Addendum is severable and distinct from the others and if at any time any provision of this is or becomes illegal, invalid or unenforceable in any respect under the law of any jurisdiction, that will not affect or impair the legality, validity or enforceability in that jurisdiction of any other provision of this Addendum.<\/span><\/p>\n<ul>\n<li aria-level=\"1\"><span style=\"font-weight: 400;\">\u00a0<\/span><b>Notices and Variation<\/b><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">All notices, consents, demands, and other communications required or permitted to be given by either Party under this Addendum shall be in writing. No amendment to this Addendum will be effective unless in writing and signed by both Parties.<\/span><\/p>\n<ul>\n<li aria-level=\"1\"><b>Changes in Laws<\/b><span style=\"font-weight: 400;\">\u00a0<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">In the event of (i) any newly enacted Applicable Data Protection Law, (ii) any change to an existing Applicable Data Protection Law (including generally-accepted interpretations thereof), (iii) any interpretation of a new or existing Applicable Data Protection Law by You, or (iv) any material new or emerging cybersecurity threat, which individually or collectively requires a change in the manner by which <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\"> is delivering the services to You, the Parties shall agree in writing upon how <\/span><b>Ovation<\/b><span style=\"font-weight: 400;\">\u2019s delivery of the services will be impacted and shall make equitable adjustments to the terms of the Agreement and the Services in accordance with any change procedures as may be agreed to by the Parties.\u00a0<\/span><\/p>\n<ul>\n<li aria-level=\"1\"><span style=\"font-weight: 400;\">\u00a0<\/span><b>Governing Law and Jurisdiction<\/b><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">16.1 The jurisdiction of this Addendum shall be the jurisdiction of the Agreement. In the event there is no jurisdiction clause in the Agreement, any dispute or claim in connection with this Addendum shall be governed by and construed in accordance with:<\/span><\/p>\n<p><span style=\"font-weight: 400;\">16.1.1 in the case of the contracting Ovation entity being in Europe, the laws of Ireland,\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">16.1.2 in the case of the contracting Ovation entity being in the USA or elsewhere, the laws of the state of <\/span><span style=\"font-weight: 400;\">Utah, United States<\/span><span style=\"font-weight: 400;\">.<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><\/p>\n<h3><b>SCHEDULE<\/b><\/h3>\n<p><b>EEA STANDARD CONTRACTUAL CLAUSES<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The relevant Controller-to-Processor Standard Contractual Clauses (Module 2)\u00a0are available: <\/span><a href=\"https:\/\/commission.europa.eu\/publications\/standard-contractual-clauses-international-transfers_en\"><span style=\"font-weight: 400;\">here<\/span><\/a><span style=\"font-weight: 400;\">.\u00a0<\/span><\/li>\n<\/ol>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">For the purposes of entering the Standard Contractual Clauses:<\/span>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">The optional Clause 7 shall not apply.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">Option 2 of Clause 9 (Use of sub-processors) shall apply.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">The description of the transfer of Personal Data set out in Appendix A of this Agreement shall be deemed inserted in place of Annex I of the Standard Contractual Clauses.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><b>Ovation<\/b><span style=\"font-weight: 400;\">\u2019s security measures (including SOC 2 Type 2 certification) described in Section 4 of the Addendum shall be deemed inserted in place of Annex II of the Standard Contractual Clauses.<\/span><\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<p><b>UK STANDARD CONTRACTUAL CLAUSES (UK Addendum\/IDTA)<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The UK SCCs Addendum is available: <\/span><a href=\"https:\/\/ico.org.uk\/media\/for-organisations\/documents\/4019535\/addendum-international-data-transfer.docx\"><span style=\"font-weight: 400;\">here<\/span><\/a><span style=\"font-weight: 400;\">. Where the UK GDPR applies, the Parties may rely on either the UK Addendum, in each case as amended or replaced from time to time.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">For the purposes of entering the UK SCCs Addendum:<\/span>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">The information contained in Appendix A of this Agreement shall be deemed to apply to Tables 1, 2 and 3 of the UK Standard Contractual Clauses; and<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><b>Ovation<\/b><span style=\"font-weight: 400;\">\u2019s security measures, as referenced in Section 4 of the Addendum (including reference to its SOC 2 Type 2 certification), shall be deemed to apply to Table 3 (Annex II) of the UK SCCs Addendum.<\/span><\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-weight: 400;\">\u00a0<\/span><\/p>\n<p>&nbsp;<\/p>\n<h3><b>APPENDIX A<\/b><\/h3>\n<h4><b><i>A. LIST OF PARTIES<\/i><\/b><\/h4>\n<p><b>Data Exporter(s) \/ Client:<\/b><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Name:<\/b><b><br \/>\n<\/b><b>Address:<\/b><b><br \/>\n<\/b><b>Contact Name, Position, Details:<\/b><b><br \/>\n<\/b><b>Relevant Activities:<\/b><b><br \/>\n<\/b><b>Roles:<\/b><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Data Importer:<\/b><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Name:<\/b><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">OVATION UP, INC<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Address:<\/b><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">833 W 1800 N, Mapleton, UT 84664, USA<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Contact:<\/b><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">OVATION UP, INC<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Relevant Activities:<\/b><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Ovation is engaged in the business of providing a comprehensive CRM system that includes a public-facing web app for collecting guest feedback and a restaurant portal (the \u201c<\/span><b>Ovation Services<\/b><span style=\"font-weight: 400;\">\u201d).<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Role:<\/b><b><br \/>\n<\/b><span style=\"font-weight: 400;\">Processor<\/span><\/p>\n<h4><b>B. DESCRIPTION OF TRANSFER<\/b><\/h4>\n<table>\n<tbody>\n<tr>\n<td><b>Categories Data Subjects<\/b><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">The personal data transferred concern the following categories of data subjects: <\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Individuals about whom Personal Data is provided to Ovation via the Services by (or at the direction of) Client, which may include without limitation Client\u2019s or its Affiliates\u2019 employees, contractors, and customers.<\/span><\/td>\n<\/tr>\n<tr>\n<td><b>Purposes of the transfer(s)<\/b><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">The transfer is made for the following purposes: Ovation will only process Client Personal Data as Processor for the following purposes and only when necessary and proportionate to comply with the Client\u2019s instructions: Providing and updating the Services as licensed, configured, and used by Client and its users, including through Client\u2019s use of Ovation settings, administrator controls or other Service functionality; Securing and real-time monitoring the Services; Resolving issues, bugs, and errors; Providing Client requested support, including applying knowledge gained from individual Client support requests to benefit all Ovation Clients but only to the extent such knowledge is anonymized as set out in the Agreement and this Appendix A detailing the subject matter, nature, purpose, and duration of Personal Data Processing in the Controller to Processor capacity; Any other documented instruction provided by Client and acknowledged by Ovation as constituting instructions for purposes of this Addendum.<\/span><\/td>\n<\/tr>\n<tr>\n<td><b>Categories of Personal Data<\/b><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Depending on the Services you use, the personal data transferred may primarily concern the following categories of data:\u00a0<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><i><span style=\"font-weight: 400;\">Client Account Information:<\/span><\/i><span style=\"font-weight: 400;\"> Data associated with the client\u2019s Ovation account, name, password, email, payment information, company name, and Client\u2019s preferences. This will include: Ovation unique user ID.<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><i><span style=\"font-weight: 400;\">Client End Users\u2019 Data<\/span><\/i><span style=\"font-weight: 400;\">: This includes the data associated with the Client&#8217;s end users, such as employees and customers, that the Client chooses to process using Ovation for the purpose of providing requested services.<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Device and Network information:<\/b><span style=\"font-weight: 400;\">\u00a0Information about your desktop and mobile device, which may include network data, operating system, user agent, MAC \/ IP\u00a0 address, and service logs.<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>User Feedback and Satisfaction Data<\/b><span style=\"font-weight: 400;\">: This may include ratings and plain text feedback on how we can improve our services.\u00a0<\/span><\/td>\n<\/tr>\n<tr>\n<td><b>Frequency of the transfer<\/b><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Continuous<\/span><\/td>\n<\/tr>\n<tr>\n<td><b>Special categories of personal data (if appropriate)<\/b><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Special categories are not required to use the Services. Such special categories of data include, but may not be limited to, Personal Data with information revealing racial or ethnic origin, political opinions, religious or philosophical belief, genetic or biometric data, data concerning your health or sexual orientation. To the extent such sensitive data is submitted, it is determined and controlled by Client in its sole discretion.<\/span><\/td>\n<\/tr>\n<tr>\n<td><b>Duration of processing<\/b><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">The applicable term of the Agreement unless otherwise required by law.<\/span><\/td>\n<\/tr>\n<tr>\n<td><b>Nature and Subject Matter of the Processing<\/b><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Ovation will process Client Personal Data for the purposes of providing the Services to Client in accordance with the Addendum.<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Retention period (or, if not possible to determine, the criteria used to determine that period)<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">The applicable term of the Agreement unless otherwise required by law.<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><\/p>\n<p>&nbsp;<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h4><b>C. COMPETENT SUPERVISORY AUTHORITY<\/b><\/h4>\n<table>\n<tbody>\n<tr>\n<td><b>Identify the competent supervisory authority\/ies in accordance with Clause 13 of the SCCs:<\/b><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">In accordance with Clause 13 of the SCCs:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">For Personal Data subject to the EU GDPR, the competent supervisory authority is generally the authority in the EEA Member State where the Data Exporter is established, or, if the Data Exporter is not established in an EEA Member State, as otherwise determined by Clause 13.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">For Personal Data subject to the UK GDPR, the competent supervisory authority is the Information Commissioner\u2019s Office (ICO).\u00a0<\/span><\/li>\n<\/ol>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div><\/div><style type=\"text\/css\">.fusion-body .fusion-builder-column-0{width:75% !important;margin-top : 0px;margin-bottom : 0px;}.fusion-builder-column-0 > .fusion-column-wrapper {padding-top : 0px !important;padding-right : 0px !important;margin-right : 2.56%;padding-bottom : 0px !important;padding-left : 0px !important;margin-left : 2.56%;}@media only screen and (max-width:1024px) {.fusion-body .fusion-builder-column-0{width:75% !important;}.fusion-builder-column-0 > .fusion-column-wrapper {margin-right : 2.56%;margin-left : 2.56%;}}@media only screen and (max-width:640px) {.fusion-body .fusion-builder-column-0{width:100% !important;}.fusion-builder-column-0 > .fusion-column-wrapper {margin-right : 1.92%;margin-left : 1.92%;}}<\/style><\/div><\/div><style type=\"text\/css\">.fusion-body .fusion-flex-container.fusion-builder-row-1{ padding-top : 5%;margin-top : 0px;padding-right : 0px;padding-bottom : 0px;margin-bottom : 0px;padding-left : 0px;}<\/style><\/div>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"100-width.php","meta":{"content-type":"","footnotes":""},"class_list":["post-15385","page","type-page","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v23.8 (Yoast SEO v23.8) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Data Processing Agreement - Ovation Up<\/title>\n<meta name=\"description\" content=\"Ovation&#039;s data processing agreement.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/ovationup.com\/data-processing-agreement\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Data Processing Agreement\" \/>\n<meta property=\"og:description\" content=\"Ovation&#039;s data processing agreement.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/ovationup.com\/data-processing-agreement\/\" \/>\n<meta property=\"og:site_name\" content=\"Ovation Up\" \/>\n<meta property=\"article:modified_time\" content=\"2025-03-04T20:02:10+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"21 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/ovationup.com\/data-processing-agreement\/\",\"url\":\"https:\/\/ovationup.com\/data-processing-agreement\/\",\"name\":\"Data Processing Agreement - Ovation Up\",\"isPartOf\":{\"@id\":\"https:\/\/ovationup.com\/#website\"},\"datePublished\":\"2025-03-04T20:00:09+00:00\",\"dateModified\":\"2025-03-04T20:02:10+00:00\",\"description\":\"Ovation's data processing agreement.\",\"breadcrumb\":{\"@id\":\"https:\/\/ovationup.com\/data-processing-agreement\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/ovationup.com\/data-processing-agreement\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/ovationup.com\/data-processing-agreement\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/ovationup.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Data Processing Agreement\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/ovationup.com\/#website\",\"url\":\"https:\/\/ovationup.com\/\",\"name\":\"Ovation Up\",\"description\":\"Actionable Guest Feedback for Restaurants\",\"publisher\":{\"@id\":\"https:\/\/ovationup.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/ovationup.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/ovationup.com\/#organization\",\"name\":\"Ovation Up\",\"url\":\"https:\/\/ovationup.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/ovationup.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/ovationup.com\/wp-content\/uploads\/2021\/03\/ovation-logo-220.png\",\"contentUrl\":\"https:\/\/ovationup.com\/wp-content\/uploads\/2021\/03\/ovation-logo-220.png\",\"width\":220,\"height\":43,\"caption\":\"Ovation Up\"},\"image\":{\"@id\":\"https:\/\/ovationup.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Data Processing Agreement - Ovation Up","description":"Ovation's data processing agreement.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/ovationup.com\/data-processing-agreement\/","og_locale":"en_US","og_type":"article","og_title":"Data Processing Agreement","og_description":"Ovation's data processing agreement.","og_url":"https:\/\/ovationup.com\/data-processing-agreement\/","og_site_name":"Ovation Up","article_modified_time":"2025-03-04T20:02:10+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"21 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/ovationup.com\/data-processing-agreement\/","url":"https:\/\/ovationup.com\/data-processing-agreement\/","name":"Data Processing Agreement - Ovation Up","isPartOf":{"@id":"https:\/\/ovationup.com\/#website"},"datePublished":"2025-03-04T20:00:09+00:00","dateModified":"2025-03-04T20:02:10+00:00","description":"Ovation's data processing agreement.","breadcrumb":{"@id":"https:\/\/ovationup.com\/data-processing-agreement\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/ovationup.com\/data-processing-agreement\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/ovationup.com\/data-processing-agreement\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/ovationup.com\/"},{"@type":"ListItem","position":2,"name":"Data Processing Agreement"}]},{"@type":"WebSite","@id":"https:\/\/ovationup.com\/#website","url":"https:\/\/ovationup.com\/","name":"Ovation Up","description":"Actionable Guest Feedback for Restaurants","publisher":{"@id":"https:\/\/ovationup.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/ovationup.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/ovationup.com\/#organization","name":"Ovation Up","url":"https:\/\/ovationup.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/ovationup.com\/#\/schema\/logo\/image\/","url":"https:\/\/ovationup.com\/wp-content\/uploads\/2021\/03\/ovation-logo-220.png","contentUrl":"https:\/\/ovationup.com\/wp-content\/uploads\/2021\/03\/ovation-logo-220.png","width":220,"height":43,"caption":"Ovation Up"},"image":{"@id":"https:\/\/ovationup.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/ovationup.com\/wp-json\/wp\/v2\/pages\/15385","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ovationup.com\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/ovationup.com\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/ovationup.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ovationup.com\/wp-json\/wp\/v2\/comments?post=15385"}],"version-history":[{"count":2,"href":"https:\/\/ovationup.com\/wp-json\/wp\/v2\/pages\/15385\/revisions"}],"predecessor-version":[{"id":15387,"href":"https:\/\/ovationup.com\/wp-json\/wp\/v2\/pages\/15385\/revisions\/15387"}],"wp:attachment":[{"href":"https:\/\/ovationup.com\/wp-json\/wp\/v2\/media?parent=15385"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}