Data Processing Addendum

Status of this page

This page is informational and is not an executed Data Processing Addendum. Data-processing terms apply only when SponsorPact and a customer sign a separate DPA or include them in a pilot agreement.

Roles and instructions

When a signed DPA applies, the customer generally acts as controller or business, and the provider of SponsorPact acts as processor or service provider for personal data submitted through the service. The signed agreement defines the parties and their instructions.

Processing details

• Subject matter: sponsorship fulfillment, evidence management, account administration, and report generation.
• Duration: the service term plus the documented retention and deletion period.
• Data subjects: customer users, sponsor contacts, event staff, vendors, and individuals appearing in customer-supplied evidence.
• Data types: identity and contact data, agreement content, event responsibilities, proof files, links, user-supplied metrics, and service metadata.

Confidentiality and security

SponsorPact is designed to limit personal-data access to authorized personnel and contractors with confidentiality obligations. The Security page describes the pilot architecture, including tenant-aware access, private storage, audit events, limited telemetry, and deletion workflows.

Subprocessors

SponsorPact may use service providers for hosting, database, authentication, storage, model processing, observability, email, analytics, and payments. A signed DPA identifies applicable subprocessors and any process for notice of material changes.

Requests and incidents

Any signed DPA states the assistance SponsorPact will provide for verified data-subject requests, security incidents, regulatory inquiries, and impact assessments, taking account of the nature of the processing and applicable law.

Return and deletion

Customers can request an export during the service term. Following termination or a verified deletion request, customer data is soft-deleted for 30 days and then scheduled for purge unless applicable law requires retention.

Transfers and audit rights

Transfer mechanisms, governing law, audit procedures, liability terms, security exhibits, and the parties' legal identities are stated in the signed DPA. To request an execution copy, email admin@sponsorpact.com.