US addendum
DEFINITIONS
“Data Protection Laws" means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the Processing of Personal Data and on the free movement of such data (the "GDPR") and any regulations or enactments thereunder, and all applicable laws and regulations relating to the Processing of Personal Data, and the equivalent of any of the foregoing in any relevant jurisdiction within the European Union (to the extent applicable), the California Consumer Privacy Act of 2018, Cal. Civ. Code § 1798.100 et seq. (“CCPA”), together with any amending or replacement legislation, including the California Privacy Rights Act of 2020 and any regulations promulgated thereunder; the Virginia Consumer Data Protection Act of 2021, Va. Code Ann. § 59.1-571 to -581; the Colorado Privacy Act of 2021, Co. Rev. Stat. § 6-1-1301 et seq.; Connecticut Public Act No. 22-15, “An Act Concerning Personal Data Privacy and Online Monitoring”; the Utah Consumer Privacy Act of 2022, Utah Code Ann. § 13-61-101 et seq.; and all other equivalent laws and regulations in any relevant jurisdiction relating to Personal Data and privacy, and each as amended, replaced or superseded from time to time.
CALIFORNIA PERSONAL DATA PROCESSING
To the extent that the Agreement or Customers instructions to Teamwork.com involve the processing of Customer Personal Data concerning California Data Subjects, and to the extent that the CCPA governs the processing of the Customer Personal Data, the Parties acknowledge and agree that, with respect to such information: Customer shall disclose Customer Personal Data to Teamwork.com only for the limited and specified purposes specified in the Agreement. Customer reserves the right, upon reasonable notice, to take reasonable and appropriate steps to help ensure that Teamwork.com uses Customer Personal Data transferred in a manner consistent with Customer’s obligations under the CCPA, including reasonable and appropriate steps to stop and remediate unauthorised use of the Customer Personal Data. Teamwork.com shall not: (a) Sell or Share (as those terms are defined under the CCPA) Customer Personal Data; (b) retain, use, or disclose Customer Personal Data for any purpose other than for the Business Purpose specified in the Agreement; (c) retain, use, or disclose Customer Personal Data outside of the direct business relationship between Customer and Teamwork.com; or (d) combine Customer Personal Data with Personal Data that it receives from, or on behalf of, another person or persons, or collects from its own interaction with Data Subjects, provided that Teamwork.com may combine Personal Data to perform a Business Purpose (with the exception of “advertising and marketing services,” as defined under the CCPA). Teamwork.com shall comply with applicable obligations and provide the same level of privacy protection as required by the CCPA, and shall assist Customer through appropriate technical and organisational measures to comply with CCPA requirements, taking into account the nature of the processing. Teamwork.com shall notify Customer if it makes a determination that it can no longer meet its obligations under the CCPA.