Workpuls, Inc ("Workpuls") provides the Service to You in accordance with and subject to the following Terms of Use (these "Terms"). By accessing or using this Service, you signify that you acknowledge, accept, and agree with all the terms of service as well as our acceptable use, and privacy policy, so please do not use or access this Service if you disagree with any part of this privacy policy. computer monitoring software 1. Definitions The following definitions apply to these Terms: ‍ "Affiliate" means any entity that directly or indirectly controls, is controlled by, or is under common control with the subject entity. "Authorized Affiliate" means any of Customer's Affiliate(s) which (a) is subject to the data protection laws and regulations of the European Union, the European Economic Area and/or their member states, Switzerland and/or the United Kingdom, and (b) is permitted to use the Services pursuant to the Agreement between Customer and Workpuls. "Control," for purposes of this definition, means direct or indirect ownership or control of more than 50% of the voting interests of the subject entity. "Controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data; where the purposes and means of such processing are determined by the Union or Member State law, the controller of the specific criteria for its nomination may be provided for the Union or Member State law. "Customer Data" means what is defined in the Agreement as "Customer Data" or "Your Data." "Data Protection Laws and Regulations" means all laws and regulations, including laws and regulations of the European Union, the European Economic Area and their member states, Switzerland and the United Kingdom, applicable to the Processing of Personal Data under the Agreement. "Data Subject" means the identified or identifiable person to whom Personal Data relates. "Personal Data" means any information relating to (i) an identified or identifiable natural person and, (ii) an identified or identifiable legal entity (where such information is protected similarly as personal data or personally identifiable information under applicable Data Protection Laws and Regulations), where for each (i) or (ii), such data is Customer Data. "Processing" means any operation or set of operations which is performed upon Personal Data, whether or not by automatic means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. "Processor" means the entity which Processes Personal Data on behalf of the Controller. "Service" refers to all software, websites, and related services provided to you by Workpuls. "Sub-processor" means any Processor engaged by Workpuls or a member of the Workpuls Group. "Supervisory Authority" means an independent public authority which is established by an EU Member State pursuant to the GDPR. "You," "Your," or "User" refers to anyone accessing or subject to the Service. 2. License for use of the service; identity authentication The Service is licensed for use only under these Terms. Workpuls reserves all rights not expressly granted to you, including title and exclusive ownership of the Service, any and all software or updates thereto and source code for the Service. Upon registering for the Service, Workpuls gives you the right to install the Service for use by the total number of Users you identify and authorize. The Service may not be used or accessed by (a) individuals who are not named individuals; or (b) any other software or hardware device that does not require a named individual to use or access it. A named individual means an individual identified by you by name who is authorized to use the Service, regardless of how such access occurs or if such individual uses any hardware or software that reduces the apparent number of users who are using the Service, such as by using a terminal service. The Service may not be used or accessed by any other software or hardware device that does not require an individual to use or access it. Workpuls reserves the right at any time to require you to provide a list of the named individual(s). You may not rent, lease, lend, sell, redistribute or sublease the Service. These Terms will govern any upgrades provided by Workpuls that replace and/or supplement the original Service. You agree to use your best efforts to protect the Service and upgrades from unauthorized use, reproduction, distribution, publication or alteration. 3. Installation, customization, and updates Installation of the Service and any required modification of the Service to accommodate your computer system must be performed by you. All updates, upgrades, enhancements and modifications to the Service MUST be performed by Workpuls. Such updates include any changes or improvements to the Service, whether arising out of the Service’s particular configuration for your use or otherwise. At all times while these Terms are in effect, you shall provide Workpuls with access to your computer system so that Workpuls may install all updates. Failure to allow Workpuls to install updates or to compensate Workpuls for the installation of updates automatically terminates all warranties for any purpose related to the Service as well as your license to use the Service. 4. Term and fees Provided prior notice of pricing is given to you, Workpuls reserves the right to charge you for use of the Service on a periodic (e.g., monthly or yearly) basis or otherwise. These Terms shall begin upon your registration for the Services and shall continue until your use of the Service is terminated by you or by Workpuls. You are responsible for all fees due to Workpuls and any compensation due to any Marketplace Member prior to the termination date. 5. Termination Upon the termination of these Terms, the Service and all updates may cease to properly function and all warranties, express or implied, regarding the Service shall terminate. Your rights under these terms will automatically terminate without notice from the Workpuls if you fail to comply with any provision of these Terms. Further, Workpuls may terminate the Service for any action taken by you that Workpuls believes in its sole discretion is an inappropriate use of the Service even if not specifically detailed by these Terms, including, any use of the Service that is prohibited by federal, state, or local law. Any warranty regarding the Service will automatically terminate without notice if you fail to comply with any provision these Terms. The parties expressly acknowledge and agree that all provisions of these Terms that concern Copyright or other protectable interests of Workpuls shall remain in full force and effect notwithstanding termination of any warranty or use of the Service. 6. Proprietary nature of the service The Service and Platform are proprietary to, and valuable trade secrets of Workpuls. You acknowledge the Service contains proprietary content, information and material that is protected by applicable intellectual property and other laws, including, but not limited to, copyright, trademark, and service marks, and that you will only use such proprietary content, information, or materials for permitted uses under these Terms. The Service is entrusted to you only for the purposes set forth in these Terms. You will not reverse engineer, duplicate, translate, modify, copy, printout, disassemble, decompile or otherwise tamper with the Service or any software provided therewith. The parties acknowledge that any violation of this provision will cause irreparable harm to Workpuls. As a consequence, the parties agree that if you fail to abide by these Terms, Workpuls will be entitled to specific performance, including immediate issuance of a temporary restraining order or preliminary injunction enforcing these Terms, and to judgment for damages caused by such breach, and to any other remedies provided by law. 7. Consent to use of data You agree that Workpuls may collect and use technical data and User information as described in its Privacy Policy (https://workpuls.com/privacy-policy), and, including, but not limited to, technical information about your device, system and application software, and peripherals, that is gathered periodically to facilitate the provision of customization, updates, and other services to you (if any) related to the Service. Workpuls may use this information, to improve the Service or to provide services or technologies to you. Workpuls treats personally identifiable information differently from general information. Personally identifiable information can be used to identify, locate or contact you. General information is information that is not personally identifiable information and is not associated with personally identifiable information. Workpuls may convert personally identifiable information into general information by excluding information that is personally identifiable. You acknowledge that general information belongs to Workpuls and that Workpuls has the right to use such general information as it determines in its sole discretion. Workpuls may process information in the country where it was collected, as well as other countries (including the United States) where laws regarding processing of personal information may be less stringent than the laws in your country. Workpuls uses personally identifiable information for its own internal purposes, including contacting you via email to inform you about updates to the Service and providing you with information relating to transactions that you conduct on the Workpuls’s website. Workpuls provides personally identifiable information to third parties who process it in accordance with Workpuls’s instructions in order for Workpuls to provide services to you (including processing payments for use of the Service). Workpuls reserves the right to disclose Your information if Workpuls has a good-faith belief that the disclosure is (a) required by law, regulation, or legal process; (b) appropriate to detect, prevent, or remedy violations of these Terms, fraud, security, or technical issues; or (c) permitted in order to protect Workpuls, other Users, or the public. If Workpuls is involved in a change of control through sale of assets or otherwise, we will give notice before your personally identifiable information is transferred or becomes subject to a different privacy policy. 8. Content and linking to other websites The Service may enable access to parties’ websites, as well as the websites of third parties (collectively, the "Websites"). The Websites may display, include, or make available content, data, information, applications or materials from third parties, including your data, or provide links to additional third-party websites ("Data and Materials"). By using the Service, you acknowledge and agree that Workpuls is not responsible for examining or evaluating the content, accuracy, completeness, timeliness, validity, copyright or trademark compliance, legality, decency, quality or any other aspect of the Websites. Workpuls does not warrant or endorse and does not assume and will not have any liability or responsibility to you or any other person for any data and materials on the Websites. To the extent you choose to access such Websites, you do so at your own initiative and are responsible for compliance with any applicable laws, including, but not limited to, applicable local laws. Workpuls reserves the right to change, suspend, remove, or disable access to the Website at any time without notice. In no event will Workpuls be liable for the removal of or disabling of access to any such Websites. Workpuls may also impose limits on the use of or access to certain Websites, in any case and without notice or liability. You agree to use the Websites at your sole risk and that Workpuls shall not have any liability to you for content that may be found to be offensive, indecent, or objectionable. 9. User content You agree that all information, data, text, sound, photographs, graphics, video, software, or other materials submitted, posted or displayed by you on or through the Service ("User Content") is your sole responsibility. Workpuls claims no ownership or control over any User Content. By submitting, posting or displaying User Content on or through the Service, you grant Workpuls a worldwide, non-exclusive, royalty-free, transferable license to use, reproduce, and adapt, such User Content to provide the Service to you. By submitting, posting or displaying User Content which is intended to be shared or made available to the general public, you grant Workpuls a worldwide, non-exclusive, royalty-free license to reproduce, adapt, distribute and publish such User Content through the Service and for the purpose of promoting Workpuls and its services. As a condition of using the Service, you agree not to use the Service to infringe the intellectual property rights of others in any way. You represent that you have the right to grant, or that the holder of any rights, including moral rights in such content has completely and effectively waived all such rights and validly and irrevocably granted to you the right to grant, the license stated above. If you post User Content in any public area of the Service, You also permit any User to access, display, view, store and reproduce such User Content for personal use. Subject to the foregoing, the owner of such User Content placed in the Service retains any and all rights that may exist in such User Content. Workpuls may review and refuse to accept or remove any User Content in its sole discretion. Workpuls reserves the right to expel Users and prevent their further access to the Services for violating these terms or applicable laws, rules or regulations. Workpuls may take any action with respect to User Content that it deems necessary or appropriate in its sole discretion if it believes that such User Content could create liability for Workpuls, damage Workpuls’s public image or business. It is Workpuls’s policy to terminate the accounts of any Users who are repeat infringers of the copyrights, or other intellectual property rights, of others.Any profile you submit must accurately describe you, as an individual person, or an agency or organization that you are authorized to create a profile for. Profiles derived from User Content may be made available through the Service. Workpuls does not make any representations regarding the accuracy or validity of such derived profiles, which may differ significantly from User Content. 10. Intellectual Property Rights Trademarks The trademarks, trade names, trade dress, logos, and service marks (collectively, the "Trademarks") displayed on www.workpuls.com are the registered and/or unregistered Trademarks of WorkPuls, Inc, or such other third party that may own the displayed Trademarks. Nothing contained on this Web site or in these terms of service grants to you, by implication or otherwise, any license or right to use any Trademarks displayed on this Web site without the written permission of WorkPuls, Inc, or such other third party that may own the displayed Trademarks. Site contents and copyright The text, Trademarks, logos, images, graphics, photos, video files, application functionality, or any other digital media, and their arrangement on this Website ("Website Content") are all subject to patent, copyright, trademark and other intellectual property protection. Website Content may not be copied for commercial use or redistribution, nor may Website Content be modified, processed, or reposted to other websites. Access to and uses of this Website are solely for your purchase our services or for personal use, information, education and communication with WorkPuls, Inc, or www.workpuls.com. You may download, copy or print the Website Content of this Website for your personal non-commercial use only. No right, title or interest in any of the Website Content of this Website is transferred to you as a result of any downloading, copying, printing or use of this Website. All rights not expressly granted to you by these Terms are reserved by WorkPuls, Inc. Identification of agent to receive notification of claimed copyright or trademark infringement If you believe that your copyrighted work or trademark has been uploaded, posted or copied to the Service and is accessible in a way that constitutes copyright or trademark infringement, please contact Workpuls by email at support@workpuls.com or by regular mail at: Workpuls, Inc. +1-415-800-4284, 1355 Market Street, Suite 488 San Francisco, California 94103 11. Disclaimer of warranty YOU EXPRESSLY ACKNOWLEDGE AND AGREE THAT USE OF THE SERVICE IS AT YOUR SOLE RISK. WORKPULS CANNOT AND DOES NOT WARRANT THE SERVICE WILL MEET YOUR REQUIREMENTS THAT THE OPERATION OF THE SERVICE WILL BE UNINTERRUPTED OR ERROR-FREE, OR THAT DEFECTS IN THE SERVICE WILL BE CORRECTED. AS SUCH, YOU SHALL NOT RELY EXCLUSIVELY ON THE SERVICE FOR ANY REASON. THE SERVICE AND ANYTHING RELATED THERETO ARE PROVIDED "AS IS" AND "AS AVAILABLE", WITH ALL FAULTS AND WITHOUT WARRANTY OF ANY KIND, AND WORKPULS HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS WITH RESPECT TO THE SERVICE AND ANYTHING RELATED THERETO, EITHER EXPRESS, IMPLIED OR STATUTORY, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES AND/OR CONDITIONS OF MERCHANTABILITY, OF SATISFACTORY QUALITY, OF FITNESS FOR A PARTICULAR PURPOSE, OF ACCURACY, OF QUIET ENJOYMENT, AND NON-INFRINGEMENT OF THIRD PARTY RIGHTS. NO ORAL OR WRITTEN INFORMATION OR ADVICE GIVEN BY WORKPULS OR ITS AUTHORIZED REPRESENTATIVE SHALL CREATE A WARRANTY. 12. Privacy and cybersecurity indemnification You agree that the Workpuls Services and Platform are used to process information and Personal Data that you provide on an individual basis or by way of a transfer by a business entity under these Terms, and for purposes of these Terms you are designated the data Controller and Workpuls is designated as Processor as those terms in defined in the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council ("GDPR"). You further agree and acknowledge your obligations as the data Controller under the Personal Data Processing Addendum set forth below. To the fullest extent permitted by law for all Personal Data that you collect, process via the Services or maintain on the Platform, you shall indemnify and hold Workpuls, its affiliates, and their respective officers, directors, trustees, shareholders, employees, and agents (each an "Indemnified Party"), harmless from and against any and all damages and liabilities or third party claims against any Indemnified Party, for loss, cost, damage, or expense of every kind and nature (including, without limitation, penalties imposed by law, regulations, rules by any regulatory authority, court costs, expenses, and reasonable attorneys’ fees) to the extent arising out of, relating to privacy and cybersecurity requirements, including without limitation, failure to comply with Articles 5 to 21, and 32 to 37 of the GDPR, or resulting from, in whole or in part, the breach or non-compliance with this Agreement or the omission, negligence, gross negligence or willful misconduct by you or any of your representatives. 13. Limitation of liability WORKPULS SHALL NOT BE RESPONSIBLE FOR ANY LOSS OR DAMAGE TO YOU OR ANY THIRD PARTIES CAUSED BY THE SERVICE OR INFORMATION CONTAINED IN THE SERVICE. YOU WAIVE ANY AND ALL CLAIMS YOU MAY HAVE AGAINST WORKPULS ARISING OUT OF THE PERFORMANCE OR NONPERFORMANCE OF THE SERVICE. YOU SPECIFICALLY WAIVE ANY AND ALL CLAIMS YOU MAY HAVE AGAINST WORKPULS AS A RESULT OF INCORRECT INFORMATION CONTENT DISPLAYED BY THE SERVICE OR CHANGES TO CONTENT MADE BY YOU. WORKPULS SHALL NOT BE LIABLE FOR ANY DIRECT, INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGE, WHETHER BASED ON CONTRACT OR TORT OR ANY OTHER LEGAL THEORY, ARISING OUT OF ANY USE OF THE SERVICE OR ANY PERFORMANCE OF THESE TERMS, INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, LOSS OF DATA, BUSINESS INTERRUPTION OR ANY OTHER COMMERCIAL DAMAGES OR LOSSES, ARISING OUT OF OR RELATED TO YOUR USE OR INABILITY TO USE THE SERVICE, EVEN IF WORKPULS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. IN NO EVENT SHALL WORKPULS’S TOTAL LIABILITY TO YOU FOR ALL DAMAGES (OTHER THAN AS MAY BE REQUIRED BY APPLICABLE LAW IN CASES INVOLVING PERSONAL INJURY) EXCEED THE AMOUNT ACTUALLY PAID BY YOU TO WORKPULS FOR THE SERVICE IN THE 365 DAYS IMMEDIATELY PRECEDING THE DATE THAT WORKPULS RECEIVES NOTICE OF A CLAIM IN WRITING FROM YOU. THE FOREGOING LIMITATIONS WILL APPLY EVEN IF THE ABOVE STATED REMEDY FAILS OF ITS ESSENTIAL PURPOSE. 14. Consent to electronic communications By registering to use the Service or Platform, or by sending us or emails, faxes, push notifications, or text or voice messages, you are communicating with us electronically. And in doing so, you expressly consent to receive communications from us electronically via email, fax, push notification, or voice or text message, whether pre-recorded or auto-dialed ("Digital Means"). We will communicate with you by the aforementioned Digital Means, or by posting notices on the Services or Platform. You agree that all agreements, notices, disclosures and other communications that we provide to you electronically satisfy any legal requirement that such communications be in writing. For the Services and Platform that integrate with a mobile functionality, your carrier’s normal messaging; data and other rates and fees will still apply. 15. International users consent to cross-border transfers of personal information For those Workpuls users located outside the United States, you acknowledge and expressly consent to Workpuls’s use of your Personal Data and further acknowledge that Workpuls’s processing of Personal Data is required to perform the Services or use the Platform. Further at times Personal Data will be accessible by individuals who are located worldwide including in countries that the European Commission or other geopolitical authorities have not determined to provide the same level of data protection as in your country, province, territory or geopolitical region, and that such information may be accessed by the courts, law enforcement and national security authorities of such jurisdictions. By providing us with your Personal Data, you are consenting to our use of it in accordance with these Terms, including the transfer of your information across international boundaries to jurisdictions anywhere in the world as permitted by local law. 16. No rights granted; Non-assignability These Terms do not constitute a grant or an intention or commitment to grant any right, title, or interest in the Service or Workpuls’s trade secrets to you. You may not sell or transfer any portion of the Service to any third party. You shall not identify the Service as coming from any source other than Workpuls. These Terms are exclusive and personal to you. You shall not assign or otherwise transfer any rights or obligations under these Terms. 17. Miscellaneous provisions Choice of Law. Regardless of the place of execution, delivery, performance or any other aspect of these Terms, these Terms and all of the rights of the parties under these Terms shall be governed by, construed under, and enforced in accordance with the procedural and substantive law of the State of California, United States of America, to the exclusion of any conflicts or choice of law rule or principle that might otherwise refer construction or interpretation of these Terms to the substantive law of another jurisdiction. Jurisdiction. You consent to personal jurisdiction in any of the state courts sitting in Hamilton County, Indiana, United States of America, and agree that any suit arising under these Terms shall exclusively be commenced and maintained in such courts. General Indemnity. You agree to indemnify and hold Workpuls and (as applicable) its related entities, affiliates, and Workpuls’s and their respective officers, directors, agents, and employees, harmless from and against any and all claims, demands, proceedings, losses and damages (actual, special, and consequential) of every kind and nature, known and unknown, including reasonable attorney fees, made by any third party due to or arising out of your breach of these Terms or your violation of any law or the rights of any third party. Attorney Fees and Expenses. In a dispute arising out of or related to these Terms, Workpuls shall have the right to collect reasonable attorney fees and costs and necessary expenditures from you. Severability. If a court finds any provision of these Terms invalid or unenforceable, the remainder of these Terms shall be interpreted so as best to affect the intent of the parties. Effect of Waiver. The failure to exercise any right provided in these Terms shall not be a waiver of prior or subsequent rights. 18. Suggestions and feedback Workpuls welcomes feedback or inquiries about the Service. If you elect to provide any feedback or comments of any nature to Workpuls, all feedback and comments shall be the sole and exclusive property of Workpuls, and Workpuls shall have the right to use such feedback in any manner and for any purpose in its exclusive discretion without remuneration, compensation, or attribution to you. Workpuls is under no obligation, however, to use such feedback. 19. Refund policy You can cancel your Workpuls subscription at any time from Organization and Billing settings within the app. If this is not available on your account proceed by sending the request to our support@workpuls.com email or directly from our in-app Support Chat. Once you submit a cancellation request you will be able to use Workpuls until the end of your billing cycle. To the extent permitted by the applicable law we do not provide refunds for partial subscription period. Refund request can only be made and considered if these specific requirements are met: 1. You have yearly Workpuls Subscription plan; 2. You request a cancellation and a refund not later than 7 days after the auto renewal charge. 20. Legal notice Workpuls may modify these Terms or any additional terms, and such modification shall be effective and binding on you upon notice by Workpuls via email to the email account provided by you upon registration for the Service. If you do not agree to any modification of these Terms, you should discontinue your use of the Service. Communications made through the Workpuls’s website or any email or contact links provided thereon shall in no way be deemed to constitute legal notice to Workpuls or any of its officers, employees, agents, or representatives, such as where notice to Workpuls is required by contract, or any federal, state, or local laws, rules, or regulations. You may provide notice to Workpuls at: Workpuls, Inc. ww.workpuls.com support@workpuls.com 21. Minimum age of users All Users of Workpuls’s Service must be at least 18 years of age and older than the age of legal majority in your jurisdiction (if it is over 18). By using the Service you promise that you are over 18 years of age and are a competent legal adult in your jurisdiction. 22. Use of Client Logos and Business Names Your use of our website, software and services is your consent to allow Workpuls to use your business name and business logos for Workpuls promotional purposes. Workpuls will only use this information as it relates to your use of our services within the scope of this Terms of Use. Personal data processing addendum This Personal Data Processing Addendum ("PDPA") addresses Personal Data Processing, privacy and cyber security obligations in addition to those expressed in the Terms as between Workpuls and Customer for subscriptions to the Workpuls Services and Platform. By agreeing to these Terms, Customer acknowledges that it and its Authorized Affiliates qualify as the "Controller" as defined under General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council ("GDPR") to the extent that Workpuls processes Personal Data in connection with Customer’s subscription to Platform. All capitalized terms not defined in this PDPA shall have the meaning set forth in the Terms. In the course of providing the Services to Customer pursuant to the Terms, Workpuls may Process Personal Data on behalf of Customer and the Parties agree to comply with the following provisions with respect to any Personal Data. 1. INTEGRATION This PDPA shall not replace any comparable or additional rights relating to Processing of Customer Data contained in the Terms. 2. PROCESSING OF PERSONAL DATA 2.1 Roles of the parties The parties acknowledge and agree that with regard to the Processing of Personal Data, Customer is the Controller, Workpuls is the Processor and that Workpuls or members of the Workpuls Group will engage Sub-processors pursuant to the requirements set forth in Section 5 "Sub-processors" below. 2.2 Customer’s processing of personal data Customer shall, in its use of the Services, Process Personal Data in accordance with the requirements of Data Protection Laws and Regulations. For the avoidance of doubt, Customer’s instructions for the Processing of Personal Data shall comply with Data Protection Laws and Regulations. Customer shall have sole responsibility for the accuracy, quality, and legality of Personal Data and the means by which Customer acquired Personal Data. 2.3 Workpuls’s processing of personal data ‍Workpuls shall treat Personal Data as Confidential Information and shall only Process Personal Data on behalf of and in accordance with Customer’s documented instructions for the following purposes: (i) Processing in accordance with the Terms and applicable order form(s); (ii) Processing initiated by Users in their use of the Services; and (iii) Processing to comply with other documented reasonable instructions provided by Customer (e.g., via email) where such instructions are consistent with the terms of the Agreement. ‍2.4 Details of the processing ‍The subject-matter of Processing of Personal Data by Workpuls is the performance of the Services pursuant to the Terms. The duration of the Processing, the nature and purpose of the Processing, the types of Personal Data and categories of Data Subjects Processed under this PDPA are further specified above. 3. RIGHTS OF DATA SUBJECTS 3.1 Data subject request ‍Workpuls shall, to the extent legally permitted, promptly notify Customer if Workpuls receives a request from a Data Subject to exercise the Data Subject's right of access, right to rectification, restriction of Processing, erasure ("right to be forgotten"), data portability, object to the Processing, or its right not to be subject to an automated individual decision making ("Data Subject Request"). Taking into account the nature of the Processing, Workpuls shall assist Customer by appropriate technical and organizational measures, insofar as this is possible, for the fulfilment of Customer’s obligation to respond to a Data Subject Request under Data Protection Laws and Regulations. In addition, to the extent Customer, in its use of the Services, does not have the ability to address a Data Subject Request, Workpuls shall upon Customer’s request provide commercially reasonable efforts to assist Customer in responding to such Data Subject Request, to the extent Workpuls is legally permitted to do so and the response to such Data Subject Request is required under Data Protection Laws and Regulations. To the extent legally permitted, Customer shall be responsible for any costs arising from Workpuls’s provision of such assistance. 4. WORKPULS PERSONNEL 4.1 Confidentiality ‍Workpuls shall ensure that its personnel engaged in the Processing of Personal Data are informed of the confidential nature of the Personal Data, have received appropriate training on their responsibilities and have executed written confidentiality agreements. Workpuls shall ensure that such confidentiality obligations survive the termination of the personnel engagement. ‍ 4.2 Reliability Workpuls shall take commercially reasonable steps to ensure the reliability of any Workpuls personnel engaged in the Processing of Personal Data. ‍ ‍4.3 Limitation of access ‍Workpuls shall ensure that Workpuls’s access to Personal Data is limited to those personnel performing Services in accordance with the Agreement. 5. SUB-PROCESSORS 5.1 Appointment of sub-processors ‍Customer acknowledges and agrees that (a) Workpuls’s Affiliates may be retained as Sub-processors; and (b) Workpuls and Workpuls’s Affiliates respectively may engage third-party Sub-processors in connection with the provision of the Services. Workpuls or a Workpuls Affiliate has entered into a written agreement with each Sub-processor containing data protection obligations not less protective than those in these Terms with respect to the protection of Customer Data to the extent applicable to the nature of the Services provided by such Sub-processor. 5.2 List of current sub-processors and notification of new sub-processors ‍Workpuls shall make available to Customer the current list of Sub-processors for the Services. Such Sub-processor lists shall include the identities of those Sub-processors and their country of location. Workpuls shall provide notification of a new Sub-processor(s) before authorizing any new Sub-processor(s) to Process Personal Data in connection with the provision of the applicable Services. ‍5.3 Objection right for new sub-processors ‍Customer may object to Workpuls’s use of a new Sub-processor by notifying Workpuls promptly in writing within ten (10) business days after receipt of Workpuls’s notice in accordance with the mechanism set out in Section 5.2. In the event Customer objects to a new Sub-processor, as permitted in the preceding sentence, Workpuls will use reasonable efforts to make available to Customer a change in the Services or recommend a commercially reasonable change to Customer’s configuration or use of the Services to avoid Processing of Personal Data by the objected-to new Sub-processor without unreasonably burdening the Customer. If Workpuls is unable to make available such change within a reasonable period of time, which shall not exceed thirty (30) days, Customer may terminate the applicable Services with respect only to those Services which cannot be provided by Workpuls without the use of the objected-to new Sub-processor by providing written notice to Workpuls. Workpuls will refund Customer any prepaid fees covering the remainder of the term of such Services following the effective date of termination with respect to such terminated Services, without imposing a penalty for such termination on Customer. ‍5.4 Liability ‍Workpuls shall be liable for the acts and omissions of its Sub-processors to the same extent Workpuls would be liable if performing the services of each Sub-processor directly under the terms of this PDPA, except as otherwise set forth in the Terms. 6. SECURITY 6.1 Controls for the protection of customer data ‍Workpuls shall maintain appropriate technical and organizational measures for protection of the security (including protection against unauthorized or unlawful Processing and against accidental or unlawful destruction, loss or alteration or damage, unauthorized disclosure of, or access to, Customer Data), confidentiality and integrity of Customer Data, as set forth in the Security, Privacy and Architecture Documentation. Workpuls regularly monitors compliance with these measures. Workpuls will not materially decrease the overall security of the Services during a subscription term. 7. CUSTOMER DATA INCIDENT MANAGEMENT AND NOTIFICATION Workpuls maintains security incident management policies and procedures specified in the Security, Privacy and Architecture Documentation and shall, notify Customer without undue delay after becoming aware of the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Customer Data, including Personal Data, transmitted, stored or otherwise Processed by Workpuls or its Sub-processors of which Workpuls becomes aware (a "Customer Data Incident"). Workpuls shall make reasonable efforts to identify the cause of such Customer Data Incident and take those steps as Workpuls deems necessary and reasonable in order to remediate the cause of such a Customer Data Incident to the extent the remediation is within Workpuls’s reasonable control. The obligations herein shall not apply to incidents that are caused by Customer or Customer’s Users. 8. RETURN AND DELETION OF CUSTOMER DATA Workpuls shall return Customer Data to Customer and, to the extent allowed by applicable law, delete Customer Data in accordance with the procedures and timeframes specified in the Security and Privacy Documentation. 9. AUTHORIZED AFFILIATES 9.1 Contractual relationship ‍The parties acknowledge and agree that, by executing the Terms, the Customer enters into the PDPA on behalf of itself and, as applicable, in the name and on behalf of its Authorized Affiliates, thereby establishing a separate PDPA between Workpuls and each such Authorized Affiliate subject to the provisions of the Agreement and this Section 9 and Section 10. Each Authorized Affiliate agrees to be bound by the obligations under this PDPA and, to the extent applicable, the Agreement. For the avoidance of doubt, an Authorized Affiliate is not and does not become a party to the Terms, and is only a party to the PDPA. All access to and use of the Services and Content by Authorized Affiliates must comply with the Terms and any violation of the Terms by an Authorized Affiliate shall be deemed a violation by Customer. ‍9.2 Communication ‍The Customer that is the contracting party to Terms shall remain responsible for coordinating all communication with Workpuls under this PDPA and be entitled to make and receive any communication in relation to this PDPA on behalf of its Authorized Affiliates. ‍9.3 Rights of authorized affiliates ‍Where an Authorized Affiliate becomes a party to the PDPA with Workpuls, it shall to the extent required under applicable Data Protection Laws and Regulations be entitled to exercise the rights and seek remedies under this PDPA, subject to the following: ‍9.3.1 Except where applicable Data Protection Laws and Regulations require the Authorized Affiliate to exercise a right or seek any remedy under this PDPA against Workpuls directly by itself, the parties agree that (i) solely the Customer that is the contracting party to the Agreement shall exercise any such right or seek any such remedy on behalf of the Authorized Affiliate, and (ii) the Customer that is the contracting party to the Terms shall exercise any such rights under this PDPA not separately for each Authorized Affiliate individually but in a combined manner for all of its Authorized Affiliates together (as set forth, for example, in Section 9.3.2, below). 9.3.2 The parties agree that the Customer that is the contracting party to the Terms and shall, when carrying out an onsite audit of the procedures relevant to the protection of Personal Data, take all reasonable measures to limit any impact on Workpuls and its Sub-Processors by combining, to the extent reasonably possible, several audit requests carried out on behalf of different Authorized Affiliates in one single audit. 10. LIMITATION OF LIABILITY Each party’s and all of its Affiliates’ liability, taken together in the aggregate, arising out of or related to this PDPA, and all PDPAs between Authorized Affiliates and Workpuls, whether in contract, tort or under any other theory of liability, is subject to the ‘Limitation of Liability’ section of Terms, and any reference in such section to the liability of a party means the aggregate liability of that party and all of its Affiliates under the Terms and all PDPAs together. For the avoidance of doubt, Workpuls's and its Affiliates’ total liability for all claims from the Customer and all of its Authorized Affiliates arising out of or related to the Agreement and each PDPA shall apply in the aggregate for all claims under both the Agreement and all PDPAs established under this Agreement, including by Customer and all Authorized Affiliates, and, in particular, shall not be understood to apply individually and severally to Customer and/or to any Authorized Affiliate that is a contractual party to any such PDPA. 11. EUROPEAN SPECIFIC PROVISIONS 11.1 GDPR ‍With effect from 25 May 2018, Workpuls will Process Personal Data in accordance with the GDPR requirements directly applicable to Workpuls's provision of its Services. ‍11.2 Data protection impact assessment ‍With effect from 25 May 2018, upon Customer’s request, Workpuls shall provide Customer with reasonable cooperation and assistance needed to fulfill Customer’s obligation under the GDPR to carry out a data protection impact assessment related to Customer’s use of the Services, to the extent Customer does not otherwise have access to the relevant information, and to the extent such information is available to Workpuls. Workpuls shall provide reasonable assistance to Customer in the cooperation or prior consultation with the Supervisory Authority in the performance of its tasks relating to Section 11.2 of this PDPA, to the extent required under the GDPR.