This section constitutes a data processing agreement upon acceptance of these Terms. You ("Controller") entrust Fuze ("Processor") with the processing of personal data on the following terms.
10.1 Subject matter — Shoot detection, workload calculation, generation of marketing recommendations from your calendar and catalogue.
10.2 Duration — For as long as your account is active.
10.3 Nature of the data — Calendar events (titles, dates, duration, description, guests), offer catalogue, brand preferences.
10.4 Categories of data subjects — You, your collaborators, and your end clients appearing in synced events.
10.5 Fuze's obligations — Process only on documented instructions; ensure confidentiality by its staff; implement the technical and organisational measures described at /legal/privacy; notify any breach within 48 hours; assist in responding to data-subject requests.
10.6 Sub-processors — General authorisation is granted for the sub-processors listed at /legal/subprocessors. Any change is notified to you 15 days before it applies; you may object.
10.7 End of contract — Deletion or return of all personal data within 30 days of the end of the service, except mandatory legal retention.
10.8 Audit — Once a year you may request the available audit reports (SOC 2, ISO, penetration tests) of our sub-processors.