Data Processing Agreement ("Agreement")

This Agreement forms part of the Contract for Services ("Principal Agreement") between:

GoZero
(Address of GoZero)
("the Company") and

[Data Processor's Name]
[Data Processor's Address]
("Data Processor")

(collectively referred to as the "Parties").

WHEREAS:

(A) The Company acts as a Data Controller.

(B) The Company wishes to subcontract certain Services, which involve the processing of personal data, to the Data Processor.

(C) The Parties intend to establish a data processing agreement in compliance with the current legal framework concerning data processing and with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, "GDPR").

(D) The Parties aim to set forth their rights and obligations.

IT IS AGREED AS FOLLOWS:

Definitions and Interpretation

"Agreement": This Data Processing Agreement including all Schedules.

"Company Personal Data": Any Personal Data processed by a Contracted Processor on behalf of the Company as per the Principal Agreement.

"Contracted Processor": A Subprocessor.

"Data Protection Laws": EU Data Protection Laws and, where applicable, the data protection or privacy laws of any other country.

"EEA": The European Economic Area.

"EU Data Protection Laws": Includes EU Directive 95/46/EC as transposed into domestic legislation of each Member State and amended, replaced or superseded periodically, including by the GDPR and laws implementing or supplementing the GDPR.

"GDPR": EU General Data Protection Regulation 2016/679.

"Data Transfer": Transfers of Company Personal Data, either to a Contracted Processor or between two establishments of a Contracted Processor, where such transfer would be restricted by Data Protection Laws.

Processing of Company Personal Data

The Processor agrees to comply with all applicable Data Protection Laws in the Processing of Company Personal Data and not to process such data except on instructions from the Company.

Processor Personnel

The Processor shall ensure that any personnel engaged in processing Company Personal Data are reliable and bound by confidentiality obligations.

Security

Processor shall implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk associated with the processing activities.

Subprocessing

The Processor must not engage any Subprocessor without prior consent from the Company.

Data Subject Rights

The Processor will assist the Company in fulfilling requests from Data Subjects in accordance with Data Protection Laws.

Personal Data Breach

The Processor will notify the Company promptly upon becoming aware of any Personal Data Breach.

Data Protection Impact Assessment and Prior Consultation

The Processor will provide necessary assistance for any data protection impact assessments and prior consultations with Supervisory Authorities or other competent data privacy authorities as required by the GDPR.

Deletion or Return of Company Personal Data

Upon the end of the services related to processing, the Processor will delete or return all Company Personal Data.

Audit Rights

The Company has the right to conduct audits and inspections to verify compliance with this Agreement.

Data Transfer

Any transfer of data outside the EU/EEA must comply with the GDPR and is subject to the Company's prior consent.

General Terms

Confidentiality: Both parties agree to maintain the confidentiality of information.

Notices: All notices must be in writing and will be considered delivered when sent to the provided addresses.

Governing Law and Jurisdiction

This Agreement shall be governed by and construed in accordance with the laws of Belgium and is subject to the exclusive jurisdiction of the courts of Antwerp.

IN WITNESS WHEREOF, the Parties have caused this Agreement to be executed by their duly authorized representatives.

For GoZero:
Signature: ______________________________
Name: Andreas Kviby
Title: CEO
Date Signed: ____________________________

For [Data Processor]:
Signature: ______________________________
Name: _________________________________
Title: __________________________________
Date Signed: ____________________________