Syndigo Europe Data Processing Addendum

Syndigo strives to apply the highest global privacy and data protection standards to the personal data our customers entrust to us. In order to allow our European-based customers, who are subject to stringent data protection requirements under the EU and UK General Data Protection Regulations, to be able to sign a Data Processing Addendum with a European-based Syndigo affiliate, Syndigo has created this pan-European Data Processing Addendum, namely, the Syndigo Europe Data Processing Addendum.

The Syndigo Europe DPA is available to all Syndigo customers in the European Economic Area and the UK, who have concluded service agreements with Syndigo and affiliate based in the EEA and UK. This includes the following Syndigo affiliates:

• Syndigo Polska Sp. Z.o.o.
• Syndigo UK Ltd
• Syndigo Europe SAS
• Syndigo Deutschland GmbH
• 1WorldSync Gmbh

In order to benefit from the Syndigo Europe DPA, customers can request to sign the Syndigo Europe Data Processing Addendum Accession Agreement from privacy@syndigo.com, which will be countersigned by the relevant Syndigo European affiliate listed above.

Update from December 15, 2025:

This DPA has been updated including the changes listed below, however, these amendments do not contain material changes from the previous version. The intent was to increase clarity, update jurisdictional specific terms in line with evolving laws and regulations, and expand to include our w entities including 1WorldSync and PowerReviews:

• Added a definition for “Personal Data Recipient.”
• Clarified when Syndigo may be required by law to process client data outside of client instructions and what it will do in that case, and aligned wording with the GDPR.
• Confirmed that clients’ instructions must comply with data protection laws, and clarified the limits of client liability.
• Clarified language regarding deletion, backup, and return of data. Importantly, Syndigo has made no changes to underlying practices.
• Made audit rights more flexible, allowing additional audits in case of data breaches or material contract breaches.
• Reflected that 1WorldSync, Inc. is certified under the EU-U.S. and Swiss-U.S. Data Privacy Framework and the UK Extension to the EU-U.S. Data Privacy Framework; as well as reaffirmed Syndigo’s commitment to notify Clients if it determines it can no longer meet obligations under these frameworks, where applicable to the Services.
• Added processing details for PowerReviews and 1WorldSync products.
• Updated jurisdiction-specific terms, including:
  • Collaboration on Brazilian data transfer clauses
  • New terms for New Zealand law
  • Updates for the UK Data (Use and Access) Act 2025
  • Clarified coverage of U.S. state privacy laws