Terms & Policies

This Data Processing Addendum (DPA) applies when SWEO processes personal data on behalf of the Customer as a data processor. SWEO will process personal data only in accordance with the Customer's documented instructions.

SWEO implements appropriate technical and organizational measures to protect personal data, including encryption, access controls, regular testing, and staff training on data protection.

SWEO may engage sub-processors to assist in providing the Services. SWEO will notify Customer of any changes to sub-processors and will ensure sub-processors are bound by data protection obligations no less protective than those in this DPA.

When personal data is transferred outside the EEA, SWEO ensures adequate safeguards are in place, including Standard Contractual Clauses (SCCs) or other approved transfer mechanisms.