GoodData Free

THIS DOCUMENT CONTAINS GOODDATA’S TERMS OF USE, DATA PROCESSING ADDENDUM WITH STANDARD CONTRACTUAL CLAUSES, AND SUPPORT TERMS. BY CHECKING THE BOX "I HAVE READ AND AGREE TO THE GOODDATA TERMS OF USE AND PRIVACY POLICY" ON THE FREE SIGNUP PAGE, YOU CONFIRM THAT YOU HAVE READ AND AGREE TO ALL CONTENTS OF THIS DOCUMENT.

GOODDATA FREE

TERMS OF USE

THESE GOODDATA FREE TERMS OF USE (THIS “AGREEMENT“) CONSTITUTE AN AGREEMENT BETWEEN THE ENTITY THAT YOU REPRESENT AND ALL AFFILIATES THEREOF (COLLECTIVELY “YOU” OR “YOUR”), AND GOODDATA CORPORATION (“GOODDATA”).  THIS AGREEMENT GOVERNS THE ACCESS TO AND USE OF THE SUBSCRIPTION SERVICES BY YOU AND YOUR CUSTOMERS.  BY CLICKING TO SIGNIFY YOUR ACCEPTANCE OF THIS AGREEMENT, OR BY YOUR SETTING UP A USER ACCOUNT, OR ACCESSING OR USING THE SUBSCRIPTION SERVICE IN ANY MANNER, YOU AGREE TO BE BOUND BY ALL OF THESE PROVISIONS HEREIN, AND ALL OTHER SUPPLEMENTAL TERMS.

YOU REPRESENT AND WARRANT THAT YOU (I) HAVE READ AND UNDERSTAND THIS AGREEMENT , (II) HAVE THE AUTHORITY TO ENTER INTO THIS AGREEMENT ON YOUR ENTITY’S BEHALF; (II) NEITHER YOU NOR YOUR AFFILIATES HAVE BEEN A PAYING CUSTOMER OF GOODDATA IN THE PREVIOUS TWELVE (12) MONTHS OF SIGNING THIS AGREEMENT; (III); AND (IV) ACCEPT THIS AGREEMENT ON YOUR ENTITY’S BEHALF.  IF YOU DO NOT AGREE WITH THE TERMS OF USE, YOU SHOULD NOT INDICATE ACCEPTANCE AND MAY NOT USE THE SUBSCRIPTION SERVICES.

YOU ACKNOWLEDGE RECEIPT OF OUR PRIVACY POLICY AND BY ORDERING THE SUBSCRIPTION SERVICES ON OUR WEBSITE, USING OUR WEBSITE, OR OTHERWISE ENGAGING IN ANY ELECTRONIC TRANSACTION WITH RESPECT TO THE SUBSCRIPTION SERVICES, THEN YOU AGREE TO RECEIVE ANY UPDATES TO OUR PRIVACY POLICY BY ACCESSING OUR WEBSITE.

1. GoodData offers certain business intelligence reporting tools and platform technology (including software, products, processes, algorithms, user interfaces, know-how, techniques, designs and other tangible or intangible technical materials or information (collectively referred to as “GoodData Technology”), via hosted web services (referred to as “Subscription Services”);
2. You seek to participate in the online offering of GoodData’s Subscription Services, which are free of charge as GoodData FREE (the “Program”), and to create a branded service offering that includes the Subscription Services as described herein.

1. Definitions.

All capitalized terms not otherwise defined herein shall have the meanings set forth below.

(a)  “Affiliates” means any entity that directly or indirectly controls, is controlled by, or is under common control with the subject entity; for purposes of this definition, “control” means direct or indirect ownership or control of more than 50% of the voting interests of the subject entity)

(b)  “Customer” means a customer of Yours to whom you offer the Subscription Services along with your product or offering and whom is bound by applicable terms and conditions meeting the requirements set forth in this Agreement.

(c)  “Customer Data” means any and all data and information that is entered or loaded into the Subscription Services by or for You or  a Customer. Customer Data excludes Usage Data.

(d)  “Deliverables” means the guides, code (including SQL queries) or other deliverables that GoodData provides to You in connection with Subscription Services. For clarity, GoodData may use compilers, assemblers, interpreters and similar tools to develop Deliverables. The term “Deliverables” does not include such tools.

(e)  “Supplemental Terms” means any operating rules, policies and procedures that may be published from time to time on our website by us, each of which is incorporated by reference and each of which may be modified from time to time without notice to You.

(f)  “Third Party Applications” means separate services or applications (and other consulting services related thereto), procured by You from a party other than GoodData that can be used in connection with the Subscription Services.

(g)  “Usage Data” means anonymized, de-identified or aggregated data information collected or generated by or on behalf of GoodData for purposes of providing, measuring or improving GoodData products and services, including development of analytics, benchmarking performance, or preparing statistics or system metrics.  For the avoidance of doubt, "Usage Data" shall not include any personally identifiable information of You or any Customer.

2. Overview.

​(a)  Program Overview. Subject to all terms and conditions set out in this Agreement, GoodData hereby grants You access to the Subscription Services according to the description set forth in the program schedule (“Program Schedule”) attached hereto as Schedule A and incorporated herein by reference.  As part of the Program and during the Term of this Agreement, You will be granted the right to (i) access certain portions of the Subscription Services directly; and (ii) provide access to and provision certain portions of the Subscription Services externally to Your Customers. GoodData will provide operational infrastructure, integration, and support for the Subscription Services as outlined in Schedules A and Schedule B, or as otherwise agreed to in writing between the parties.

​(b)  Documentation.“Documentation” means the online product documentation, user instructions and help files made available to You by GoodData as part of the Subscription Services, as may be updated from time to time by GoodData.

​(c)  Technical Support Services. You are entitled to receive technical support services from trained GoodData personnel (“Support”), to the extent set forth in Schedule B.

(d)  GDPR Data Processing Addendum.  As a condition for GoodData providing the Subscription Services, You agree to the terms and conditions of the Data Processing Addendum, which are attached and incorporated into this Agreement as Schedule C.

(e)  Updates to Subscription Services.  GoodData reserves the right, in its sole and absolute discretion, to make necessary unscheduled changes, updates or enhancements to the Subscription Services at any time. GoodData may add or remove functionalities or features and may suspend or stop a Subscription Service altogether.

(f)  Subscription Service Notices.   GoodData and its third party providers may send You electronic communications about the Subscription Services. If You choose to opt-out of receiving such messages, or do not register to receive communications, You accept all liability caused by or associated with foregoing such communications.

(g)  Account Passwords.  You will generate and grant password(s) for each of You and Your Customers access to and use of the Subscription Services.  GoodData will not incur any liability to You if You or Your Customer fails to maintain the confidentiality of its password for the Subscription Services.  You agree to immediately notify GoodData of any unauthorized use of the Subscription Services by contacting GoodData at: support@gooddata.com.

(h)  Tools, SDKs, and Other Software.  GoodData may, in its sole discretion, make available to You for Your convenience certain software tools, software development kits (SDKs), and similar software for download (“Other Software”).  Such Other Software are not deemed GoodData Technology, or Subscription Services, and such Other Software will be separately licensed to You.  To the extent any Other Software contains components authored by third parties and licensed to GoodData, they may be subject to additional terms, which terms may be set forth in the third party notice file(s) that may accompany the Other Software. You acknowledge and agrees that Your use of such Other Software is subject to Your compliance  with any such additional terms.

(i)  Previews. GoodData may make available to You certain products, features, services, software, regions or cloud providers that are not yet generally available, including such products, features, services, software, regions or cloud providers that are labeled as “private preview,” “public preview,” “pre-release” or “beta” (collectively, “Previews”). You may access and use Previews solely for your internal evaluation purposes and in accordance with the Preview Terms. In the event of any conflict between this Agreement and the Preview Terms, the Preview Terms shall govern and control solely with respect to the Previews.

(j)  Third Party Applications. GoodData may also provide URL links or interconnectivity within the Subscription Services to facilitate Your use of Third Party Applications, at Your sole discretion. Notwithstanding the foregoing, any procurement or use of Third Party Applications are solely between You and the applicable third party and GoodData will have no liability for such Third Party Applications.

(k)  Marketing. GoodData may use and display Your name, logo, trademarks, and service marks on GoodData’s website and in GoodData’s marketing materials in connection with identifying You as a customer of GoodData. Upon Your written request, GoodData will promptly remove any such marks from GoodData’s website and, to the extent commercially feasible, GoodData’s marketing materials. If GoodData reasonably requests, You agree to participate in a case study, press release and/or similar activities.

3. Technology License Grant.

​(a)  License to Use GoodData Technology. During the Term of this Agreement and subject to the terms and conditions hereof, GoodData hereby grants to You a temporary, limited, revocable, nonexclusive license to access and use the Subscription Services in accordance with GoodData’s Documentation solely for  the intended use under Section 2(a) of this Agreement. You may permit Your contractors and Affiliates to serve as users of the Subscription Services provided that any use by each such party is solely for Your benefit. You  shall be responsible for each party’s compliance with this Agreement.

​(b)  Reservation of Rights. Other than Your and Your Customers right to access and the use the Subscription Services, as set forth in this Agreement, no other license or grant of access to the GoodData Technology, Subscriptions Services, Products, or intellectual property is provided to You. GoodData expressly reserves the right to market and provide the Subscription Services itself or through other resellers, distributors, licensees or agents, and You shall not be entitled to any commission or compensation whatsoever in relation to the marketing or provision of the Subscription Services by GoodData or its resellers, distributors or agents.

4. Confidential Information.

​(a)  Ownership.  No title is granted, express or implied, nor shall title be deemed assigned, to You hereunder to any of the Usage Data or GoodData’s intellectual property, or any intellectual property of GoodData’s associates and licensors; GoodData retains all right, title, and interest, including all copyright, trade secret, patent, trademark and other proprietary rights, in and to the Usage Data, GoodData’s Marks, and in and to the GoodData Technology, and all modifications, enhancements, and other works derivative of the GoodData Technology. The Subscription Services GoodData performs and the resulting Deliverables are generally applicable to GoodData’s business and are part of Platform Technology. Subject to the terms and conditions of the Agreement, GoodData hereby grants You a limited, non-exclusive, royalty-free, non-transferable worldwide license to use the Deliverables internally solely in connection with such Your use of the Subscription Services during the period in which such You have valid access to the Subscription Services.

(b)  Restrictions. You shall not (i) copy, edit, modify, adapt, translate, port, reproduce (except as necessary for installation), distribute, transfer, lend, sell, sublicense, assign or otherwise transfer any of the GoodData Technology, or any component thereof; (ii) prepare any derivative work based upon the GoodData Technology or any component thereof; (iii) reverse engineer, disassemble, or decompile the GoodData Technology or any component thereof, or attempt to discover or disclose the source code of the GoodData Technology or any component thereof except as permitted by applicable law notwithstanding this prohibition; (iv) encumber, time-share, rent, or lease the rights granted under this Agreement; (vi) use the GoodData Technology in a manner that is in violation of any third party rights of privacy or intellectual property rights; or (vii) remove, obscure, or alter any notice of intellectual property rights present on or in the GoodData Technology or any component thereof.

(c)  Feedback.  From time to time, GoodData may request that You provide GoodData with verbal and/or written suggestions, comments or other feedback related to GoodData’s existing or prospective GoodData Technology or Subscription Services, including, without limitation, design input, and troubleshooting or other assistance provided in response to support requests (collectively, “Feedback”).  You and Your Customers are not obligated to provide GoodData with Feedback.  You hereby assign to GoodData all right, title and interest in and to such Feedback.  All Feedback is provided “AS IS.”  You make no warranties whatsoever about any Feedback.

(d)  Trademark License.  Each party hereby grants to the other, subject to the terms and conditions set forth in this Agreement, a temporary, limited, revocable, nonexclusive, non-transferable, worldwide license, without the right to sublicense, to use, during the Term of this Agreement, their respective trademarks, service marks and logos (collectively referred to as “Marks”) on their respective web sites and in mutually agreed-upon collateral sales materials.  You will only use and display GoodData’s Marks and copyrighted information in accordance with the applicable guidelines provided by GoodData.  Each party will ensure that proper trademark and copyright notices are displayed at all times.  All of the benefit and goodwill associated with a party’s use of the other party’s Marks will inure entirely to the Mark owner.

(e)  Customer Data. You shall own and retain ownership of all right, title, and interest in and to the Customer Data.  Subject to the terms of this Agreement, You hereby grant to GoodData and its Affiliates a non-exclusive, worldwide, royalty-free right to collect, store, process and disclose the Customer Data solely to the extent necessary to provide the services to You or as may be required by law. The foregoing license includes the right to share Your contact information with third party service providers solely for the purposes of providing You or Your Customers with information about the Subscription Services. You shall ensure that GoodData has the right to access and use Your and Your Customers’ account information and any data You or Your Customer upload to the Subscription Services for the purposes of delivering the Subscription Services, responding to any technical problems, troubleshooting, and testing. You are solely responsible for the accuracy, content and legality of all Customer Data. You warrant that You have and will have sufficient rights in the Customer Data to grant the rights to GoodData under this Agreement and that the Customer Data and its use in the Subscription Services will not violate the rights of any third party.

5. Your Obligations; Restrictions.

​(a)  Obligations. Your access to and use of the Subscription Services shall be subject to and conditioned upon Your continued compliance with the terms and conditions of this Agreement.  You represent and warrant that You have the legal authority to enter into this Agreement.  You agree that You will be liable for any acts or omissions by You or Your Customers that would otherwise constitute a material breach of this Agreement (including with respect to unauthorized data uploads).  Without limitation of the foregoing, You hereby agree that You will provide the Subscription Services to Your Customers subject to the same terms and conditions as set forth herein, including, such terms and conditions that: (i) are no less protective of GoodData’s rights and ownership than this Agreement, and contain restrictions at least equivalent to those set forth in Sections 4 and 5; (ii) do not grant greater use or access rights to the Subscription Services than those rights, licenses and permissions described in this Agreement; (iii) contain warranty disclaimers consistent with those set forth in this Agreement, including conspicuous disclaimers of warranties of merchantability, satisfactory quality and fitness for particular purpose, and a statement that GoodData and its licensors do not grant any warranty and shall not have any direct or indirect liability to your Customers; and (iv) ensure You and Your Customers safeguard and protect the Subscription Services and account passwords with the same level of care used to protect Your or Your Customer’s own highly proprietary information, but not less than a commercially reasonable level of care for highly proprietary information. Notwithstanding the requirement in part 5(a)(iii) above, should any claim or cause of action by Your Customer against GoodData or its licensors exist relating to the Subscription Services, You will require your Customer to exhaust all claims against You before bringing such suit against GoodData.  You shall use best efforts to cooperate with GoodData to enforce all such limitations, restrictions and protections with respect to Your Customers. If You offer terms to Your Customers that create greater liability than the liability assumed by GoodData under this Agreement You hereby agree that You and Your Customers will not have any recourse with GoodData for such terms and that you shall indemnify GoodData for such excess liability.  You hereby agree not to provide Your Customers with any terms that permit Your Customers to enforce this Agreement against GoodData.

(b)  Restrictions. You will not make any representations or warranties regarding the GoodData Technology and Subscription Services beyond those contained in this Agreement or published materials made available to You as part of the Program. You shall not engage in, and shall contractually restrict each Customer from engaging in: (A) sending or storing infringing, obscene, threatening, libelous, or otherwise unlawful or tortious material, including material harmful to children or violative of third party privacy rights; (b) sending or storing material containing malware or any other harmful computer code, files, scripts, agents or programs; (C) interfering with or disrupting the integrity or performance of the Subscription Services or the data contained therein, or unreasonably burdens the infrastructure utilized by GoodData to deliver the Subscription Services.

(c)  Access; Security. You are responsible for all activities conducted under all login credentials assigned to or created by You and Your personnel, including as a result of any sharing of login credentials, or failure to adequately safeguard login credentials. You shall not (i) permit the concurrent use of a single login credential, or time-sharing of the GoodData Technology; (ii) attempt to circumvent the authentication required to access the GoodData Technology or other security measures of the GoodData Technology, or (iii) authorize or permit any person or entity to do any of the foregoing.

(d)  No Personal Information. You expressly acknowledge and agree that You and Your Customers shall not submit to or process via the Subscription Services, and GoodData shall neither accept nor have any liability to You or Your Customers for, any data that is Personal Information (as defined below) or any Protected Health Information subject to the Health Insurance Portability and Accountability Act (“HIPAA”) (where “Protected Health Information” or “PHI” has the meaning set forth in HIPAA), unless and until You purchase the GoodData platform and services package intended for the processing and distribution of such data. As used herein, “Personal Information” means personal information as defined under applicable regulation, including the EU General Data Protection Regulation or California Consumer Privacy Act.

(e)  Suspension. GoodData may immediately and upon notice suspend all or portion of Your or Your Customer’s access to the Subscription Services (without any liability to You or Your Customer in connection with such suspension), if GoodData has a good faith belief that You or Your Customer has breached the restrictions in this Section 5.

6. Confidential Information.

​(a)  Confidential Information Defined. As used herein, “Confidential Information” means non-public information provided under this Agreement that the party disclosing the information designates at the time of disclosure as being confidential, or, if disclosed orally or visually, is identified as such prior to disclosure, or which, under the circumstances surrounding the disclosure, the receiving party knows or has reason to know should be treated as confidential without the need to be marked as such.  Without limiting the foregoing, Confidential Information shall include any information regarding a party’s financial condition, business opportunities, plans for development of future products, unreleased versions of products, know-how, technology, Customer information, and Customer data.  The GoodData Technology and GoodData Subscription Services shall be deemed GoodData Confidential Information.  Notwithstanding the foregoing, nothing received by a receiving party shall be construed as Confidential Information which: (i) is generally available to the public without breach of this Agreement; (ii) is lawfully obtained from a third party without a duty of confidentiality; (iii) is known to the receiving party prior to such disclosure; or (iv) is, at any time, developed by the receiving party independent of any such disclosure(s) from the disclosing party and the receiving party can reasonably show such independence.

​(b)  Non-Disclosure. The receiving party shall not disclose the disclosing party’s Confidential Information to any third party and may only use the disclosing party’s Confidential Information for performing and exercising its rights under this Agreement.  Both parties shall protect Confidential Information from disclosure or misuse by using the same degree of care as for their own confidential information of like importance, but shall at least use reasonable care.  Further, both parties agree to have each of their employees or independent contractors with access to any Confidential Information agree to be bound by an enforceable agreement that provides for the protection of the Confidential Information from any unauthorized use or disclosure to at least the same extent as does this Agreement.  Each receiving party agrees to promptly notify the disclosing party upon learning of any unauthorized disclosure of the disclosing party’s Confidential Information, and shall provide reasonable assistance to the disclosing party to remedy and contain such breach.  In connection therewith, You agree to provide any such notice to GoodData at security@gooddata.com. The foregoing notwithstanding, a receiving party may disclose the other party’s Confidential Information if the information is required by law to be disclosed in response to a valid order of a court of competent jurisdiction or authorized government agency, provided that the receiving party must give the disclosing party prompt written notice and obtain or allow for a reasonable effort by the disclosing party to obtain a protective order prior to disclosure.

7. Security; Transmission.

​(a)  Security Procedures. Subject to 5(c) above, GoodData shall use commercially reasonable efforts to maintain administrative, physical, and technical safeguards reasonably designed for the protection of the security, confidentiality and integrity of Customer Data as processed by the Subscription Services, taking into consideration GoodData’s size, resources and nature and scope of its activities.

​(b)  Responsibility for Transmitted Data. You acknowledge and agree that the Customer Data will be subject to transmission over the Internet, and over various networks, only part of which may be owned and/or operated by GoodData, and that GoodData shall not be held responsible for such transmissions or any Customer Data which is lost, altered, intercepted or stored without authorization during  such transmission.

8. Fees and Payment.

​(a)  Taxes. You will be responsible for and will indemnify and hold GoodData harmless against all international, federal, state and local taxes of any government, including, but not limited to, sales and use tax (exclusive of taxes on GoodData’s net income), duties and assessments arising on or measured by amounts payable to GoodData or arising on or measured by amounts sold by You. If any applicable law requires You to withhold amounts from any payments to GoodData: (a) You shall effect such withholding, remit such amounts to the appropriate authorities and promptly furnish GoodData with tax receipts evidencing the payments of such amounts; and (b) in the event GoodData is required to remit the withholding, GoodData shall make such payment, and the sum payable by You upon which the deduction or withholding is based shall be increased to the extent required such that GoodData receives the gross amount owed by You notwithstanding such withholding.

​(b)  Currency Control. You represent and warrant that, as of the Effective Date of this Agreement, no currency control laws applicable in countries other than the United States where You conduct the activities under the Agreement prevent the payment to GoodData of any sums due under this Agreement.  If any such laws come into effect and the local government of the Territory does not permit that payment be made in United States Dollars, You will notify GoodData immediately, and if so instructed by GoodData, deposit all monies due GoodData to the account of GoodData in a local bank of GoodData’s choice in the affected country.

9. Indemnification.

You shall:  (i) defend and hold harmless GoodData against any claim, action, suit or proceeding (each, a “Claim”) brought by a third party (including your Customers) to the extent that it is based upon a claim related to: (A) the transfer of Customer Data and its processing and use by GoodData as contemplated by this Agreement or otherwise arising out of use of Your Customer Data in connection with the Subscription Services, (B) Your branded service offering, (C) Your Customer’s use of the Subscription Services (D) Your distribution of the Subscription Services, or (E) other materials supplied by You or Your Customers for use alongside the Subscription Services (including, without limitation, any product related documentation that is not GoodData Technology); and (ii) indemnify GoodData from any resulting liabilities, losses, damages, fines, penalties, judgments, settlement amounts, costs and expenses incurred by GoodData in connection with such Claim(s), provided that GoodData (AA) promptly provides You with notice of such claim; (BB) allows You control over the defense thereof and related settlement negotiations; and (CC) reasonably cooperates in response to Your requests for assistance.  GoodData may not settle or compromise such a claim without Your prior written consent.  GoodData has no indemnity obligations to You.

10. Limitation of Liability.

(a)  TO THE EXTENT PERMITTED BY LAW, THE GOODDATA TECHNOLOGY AND SUBSCRIPTION SERVICES ARE PROVIDED “AS IS” WITHOUT ANY WARRANTY WHATSOEVER, AND GOODDATA EXPRESSLY DISCLAIMS AND EXCLUDES, ON BEHALF OF ITSELF AND ITS AFFILIATES AND LICENSORS, ANY AND ALL WARRANTIES WHETHER EXPRESS, IMPLIED OR STATUTORY, INCLUDING, WITHOUT LIMITATION ANY WARRANTY OF NON-INFRINGEMENT, MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, SATISFACTORY QUALITY, TITLE, OR QUIET ENJOYMENT.  GOODDATA DOES NOT MAKE ANY WARRANTY THAT ANY OF THE GOODDATA TECHNOLOGY OR SUBSCRIPTION SERVICES WILL BE FREE FROM ERRORS OR VIRUSES, UNINTERRUPTED, OR AVAILABLE AT ANY PARTICULAR TIME OR ANY WARRANTY ABOUT THE RELIABILITY, AVAILABILITY, ACCURACY, SECURITY OF DATA, OR ACHIEVEMENT OF ANY RESULTS IN CONNECTION WITH ANY OF THE GOODDATA TECHNOLOGY, SUBSCRIPTION SERVICES OR THIS AGREEMENT.  GOODDATA DOES NOT WARRANT THAT ANY OF THE GOODDATA TECHNOLOGY OR SUBSCRIPTION SERVICES WILL MEET YOUR OR YOUR CUSTOMER’S NEEDS OR REQUIREMENTS OR ANY ERRORS WILL BE CORRECTABLE OR CORRECTED.

(b)  YOU ACKNOWLEDGE THAT GOODDATA CANNOT CONTROL THE TRANSMISSION OR FLOW OF DATA TO OR FROM THE INTERNET OR THROUGH SOFTWARE OR EQUIPMENT OPERATED OR CONTROLLED BY THIRD PARTIES (INCLUDING BUT NOT LIMITED TO CLOUD SERVICE PROVIDERS SUCH AS AWS) AND ACTIONS OR INACTIONS OF THIRD PARTIES AND THAT THIRD PARTIES CAN INTRODUCE MALWARE OR OTHER HARMFUL SOFTWARE OR IMPAIR OR DISRUPT USE OF THE INTERNET OR THE SUBSCRIPTION SERVICES OR OBTAIN UNAUTHORIZED ACCESS TO YOUR CUSTOMER DATA OR YOUR INFORMATION TECHNOLOGY SYSTEMS. GOODDATA CANNOT GUARANTEE THAT SUCH EVENTS AND ACTIONS WILL NOT OCCUR. GOODDATA DISCLAIMS ANY AND ALL LIABILITY RESULTING FROM OR RELATED TO SUCH EVENTS AND ACTIONS, INCLUDING UNAUTHORIZED ACCESS TO AND USE OF YOUR CUSTOMER DATA AND INFORMATION TECHNOLOGY SYSTEMS. WITHOUT LIMITATION, GOODDATA SHALL NOT BE LIABLE FOR SUCH EVENTS AND ACTIONS OR ANY RESULTING DISCLOSURE, TRANSMISSION, FLOW, CORRUPTION OR ERASURE OF CUSTOMER DATA OR CONTENT USED, ACCESSED, UPLOADED, INTERFACED WITH, TRANSMITTED, RECEIVED OR STORED ON THE THIRD PARTY HARDWARE OR THROUGH THE SUBSCRIPTION SERVICES BY THIRD PARTIES OR THE INTRODUCTION OF SOFTWARE MALWARE OR OTHER HARMFUL CODE.

(c)  TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, AND EXCEPT FOR YOUR INDEMNIFICATION OBLIGATIONS, BREACH OF THE CONFIDENTIALITY OBLIGATIONS OR VIOLATION OF GOODDATA OR ITS LICENSOR’S INTELLECTUAL PROPERTY RIGHTS, IN NO EVENT SHALL EITHER PARTY BE LIABLE FOR ANY SPECIAL, INCIDENTAL, INDIRECT OR CONSEQUENTIAL DAMAGES WHATSOEVER (INCLUDING WITHOUT LIMITATION, DAMAGES OR LOSS OF BUSINESS PROFITS, BUSINESS INTERRUPTION, LOSS OF BUSINESS INFORMATION, DATA BREACH, LOSS, DAMAGE OR RECOVERY OF DATA, OR ANY OTHER PECUNIARY LOSS) RESULTING FROM OR ARISING OUT OF OR IN CONNECTION WITH THIS AGREEMENT, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES AND NOTWITHSTANDING ANY FAILURE OF THE ESSENTIAL PURPOSE OF THIS AGREEMENT OR ANY LIMITED REMEDY HEREUNDER.

(d) EXCEPT FOR YOUR INDEMNIFICATION OBLIGATIONS OR A VIOLATION OF GOODDATA OR ITS LICENSOR’S INTELLECTUAL PROPERTY RIGHTS, EACH PARTY’S AGGREGATE LIABILITY HEREUNDER SHALL IN NO EVENT EXCEED $500.

11. Suspension and Termination.

​(a)  Term. This Agreement shall commence on the Effective Date set forth above and shall remain in effect until terminated in accordance with its terms.  Notwithstanding any provision to the contrary in this Agreement, GoodData, in its sole and absolute discretion, reserves the right to: (i) modify or amend any provision in this Agreement or Schedule A; (ii) terminate this Agreement or Schedule A for any reason or no reason, at its convenience; or (iii) discontinue offering GoodData Free for any reason or no reason, at its convenience.

​(b)  Suspension. In addition to any of its other rights or remedies (including, without limitation, any termination rights) set forth in this Agreement, GoodData reserves the right to suspend provision of the Subscription Services if GoodData deems such suspension necessary as a result of You or Your Customer’s breach of Section 5, if You reasonably determine suspension is necessary to avoid material harm to You or Your customers, including if the Subscription Services is experiencing denial of service attacks, mail flooding, or other attacks or disruptions outside of GoodData’s control, or  as required by law or at the request of governmental entities.  You acknowledge that if Your access to the Subscription Services is suspended, You may no longer have access to the Customer Data. GoodData reserves the right, in its sole and absolute discretion, to deactivate, change and/or require You to change Your user account for any reason and at any time, with or without prior notice.

​(c)  Termination by You. You may terminate this Agreement upon thirty (30) days’ written notice to GoodData. You may stop using GoodData FREE any time by sending an email to support@gooddata.com.

​(d)  Effect of Termination. Upon termination or expiration of this Agreement all rights and licenses granted to You hereunder, including, without limitation, the right to use GoodData’s Marks, shall immediately cease and You shall return or destroy Confidential Information in Your possession or control.  AFTER TERMINATION OF THE GOODDATA FREE SUBSCRIPTION SERVICES, ANY CUSTOMER DATA ENTERED INTO THE SUBSCRIPTION SERVICES MAY BE PERMANENTLY LOST UNLESS YOU: (A) PURCHASE A PAYING SUBSCRIPTION SERVICE OR (B) EXPORT YOUR AND/OR YOUR CUSTOMER DATA FROM THE GOODDATA TECHNOLOGY BEFORE THE END OF THE GOODDATA FREE SUBSCRIPTION SERVICES TERM Following termination or expiration, GoodData shall have no obligation to maintain or provide You with copies of Customer Data. Termination of this Agreement shall not limit either party from pursuing any other remedies available to it, including injunctive relief, nor shall such termination relieve any obligation to pay all fees that have accrued or are otherwise owed under this Agreement. The parties’ rights and obligations under Sections 4(a), 4(b), 4(c), 4(e), 5, 6, 8-10, 11(d) and 12 shall survive the expiration or earlier termination of this Agreement.

12. General.

​(a) Change to This Agreement. GoodData reserves the right to revise this Agreement from time to time.  If applicable, GoodData may date and post the most current version of the Agreement on the GoodData website. Any changes will be effective upon posting the revised version of this Agreement (or such later effective date as may be indicated at the top of the posted Agreement, if any).  Your continued access or use of any portion of the Subscription Services constitutes Your acceptance of such changes. If You do not agree to any of the changes, GoodData is not obligated to keep providing the Subscription Services, and You must stop using the Subscription Services.

​(b)  Governing Law. The parties agree to first seek to amicably manage and resolve misunderstandings or disputes by escalating the same to their respective executives for timely consideration. This Agreement will be governed by and construed, interpreted and enforced in accordance with the laws of the State of California, without regard to conflicts of laws provisions thereof, and without regard to the United Nations Convention on the International Sale of Goods.

​(c)  Compliance with Law. You will comply with all applicable laws in operating Your business, undertaking all Program activities, and marketing the GoodData Technology and Subscription Services.  You will not engage in any deceptive or unethical trade practices or any act which might harm GoodData’s reputation or the reputation of the GoodData Technology or Subscription Services. Including without restriction, all applicable anti-corruption laws and regulations (“Anti-Corruption Laws”) including but not limited to the United States Foreign Corrupt Practices Act (“FCPA”) and/or the UK Bribery Act, irrespective of whether You are legally subject to it. You shall not cause GoodData to violate the FCPA, the UK Bribery Act or any Anti-Corruption Laws in connection with the activities conducted on behalf of GoodData under the Agreement or any other activities involving the GoodData (collectively, the “Activities”).  You shall not, in connection with the Activities, pay, offer, promise, or authorize the payment or transfer of anything of value, directly or indirectly, to any other person or entity for the purpose of improperly obtaining or retaining business, for any other advantage for GoodData, or for any other purpose prohibited by the FCPA, UK Bribery Act or any Anti-Corruption Laws.

​(d)  Assignment. This Agreement shall inure to the benefit of and be binding upon the parties and their respective successors and permitted assigns.

​(e)  Binding on Successors. This Agreement shall inure to the benefit of and be binding upon the parties and their respective successors and permitted assigns.

​(f)  Severability. If any provision or part of this Agreement is determined by a court of competent jurisdiction to be illegal, invalid, or unenforceable, the parties intend that the court will modify the provision to the minimum extent necessary to make it valid and enforceable, or if it cannot be made valid and enforceable, the parties intend that the court will sever and delete the illegal, invalid, or unenforceable provision or part from this Agreement.  Any change to or deletion of a provision or part of this Agreement under this Section will not affect the validity or enforceability of the remaining provisions of this Agreement, which will continue in full force and effect.

​(g)  Waiver of Breach. No delay or omission by either party to exercise any right or power arising upon the other party’s nonperformance or breach will impair that right or power or be construed as a waiver of it.  Any waiver must be in writing and signed by the waiving party.  A waiver on one occasion will not be construed as a waiver of any subsequent event of nonperformance or breach.

​(h)  Injunctive Relief. Any breach of the confidentiality or intellectual property rights terms under this Agreement by either party hereunder will result in harm and economic loss to the other party not compensable by monetary damages.  Either party shall be entitled to seek an injunction against such breach or threatened breach, in addition to other legal or equitable remedies, and without the need to post a bond or other financial security for such injunctive relief.

​(i)  Force Majeure. Except for the obligation to make payments, performance under this Agreement shall be postponed automatically to the extent that either party is prevented from meeting its obligations by causes beyond its reasonable control, including any cause beyond such party’s reasonable control, including but not limited to acts of God, labor disputes or other industrial disturbances, systemic electrical, telecommunications, or other utility failures, earthquake, storms or other elements of nature, blockages, embargoes, riots, public health emergencies (including pandemics and epidemics), acts or orders of government, acts of terrorism, or war.

​(j)  Notices and Consent to Electronic Communication. You consent to receiving electronic communications and notifications from GoodData in connection with the Subscription Services and the Agreement. You agree that any such communication will satisfy any applicable legal communication requirements, including that such communications be in writing. GoodData may provide You with notices regarding the Subscription Services, including changes to this Agreement and Schedule A, by email to the email address that Your registered with (and/or other alternate email address associated with Your account if provided), or by regular mail. Your will be deemed to have received any email sent to the email address then associated with Your account when GoodData sends the email. All notices and requests in connection with this Agreement required be given by You to GoodData shall be given in writing to: Attn: General Counsel, GoodData Corporation, 1 Post St., Suite 400, San Francisco, CA 94014.

​(k)  No Agency. The parties acknowledge that each is an independent contractor and nothing herein constitutes a joint venture, partnership, or distributor relationship.  You have no right to vary any policies, conditions, representations or warranties made by GoodData, and neither party has the right to bind or act for the other as agent or in any capacity except as expressly provided in writing by amendment to this Agreement.  The relationship under this Agreement shall not create any legal partnership, franchise relationship, distributor relationship, or other form of legal association between the parties that would impose a liability between the parties or to third parties.

​(l)  Entire Agreement. This Agreement, including all schedules and attachments, contains the complete and exclusive statement of the agreement between the parties with respect to the subject matter herein.  The terms and conditions of this Agreement shall prevail over any purchase order submitted by You.

​(m)  Counterparts. This Agreement may be signed in counterparts and by facsimile, each of which shall be considered an original document, but together which shall constitute one complete document.

​(n)  Export Controls. The GoodData Technology is provided subject to the U.S. Export Administration Regulations and the regulations of other jurisdictions (e.g., the European Union).  Diversion contrary to applicable law is prohibited.  Without limiting the foregoing, You agree that (i) You are not, and You are not acting on behalf of, any person who is a citizen, national, or resident of, or who is controlled by the government of any country to which the United States or other applicable government body has prohibited export transactions (e.g., Iran, North Korea, etc.); (ii) You are not, and You are not acting on behalf of, any person or entity listed on a relevant list of persons to whom export is prohibited (e.g., the U.S. Treasury Department list of Specially Designated Nationals and Blocked Persons, the U.S. Commerce Department Denied Persons List or Entity List, etc.); and (iii) You will not use any GoodData Technology for, and will not permit any GoodData Technology to be used for, any purpose prohibited by applicable law.

​(o)  Controlling Language. This Agreement has been prepared and executed in the English language only, which language will be controlling in all respects.  Any translations of the provisions of this Agreement into any other language are for reference only and will have no legal or other effect.  Any notice that is required or permitted to be given by one party to the other under this Agreement must be in the English language and in writing.  All proceedings related to this Agreement will be conducted in the English language.

​(p)  Arbitration. Any dispute, claim or controversy arising out of or relating to this Agreement (including all the Exhibits) or the breach, termination, enforcement, interpretation or validity thereof, including the determination of the scope or applicability of this agreement to arbitrate, shall be determined by arbitration in San Francisco, California, before one arbitrator. The arbitration shall be administered by JAMS pursuant to its Comprehensive Arbitration Rules and Procedures. Judgment on the Award may be entered in any court having jurisdiction. This clause shall not preclude parties from seeking provisional remedies in aid of arbitration from a court of appropriate jurisdiction. The arbitrator may, in the award, allocate all or part of the costs of the arbitration, including the fees of the arbitrator and the reasonable attorneys’ fees of the prevailing party (as defined by California Civil Code Section 1717).

​(q) Governmental Approval Obligations. You shall, at Your own expense, obtain and arrange for the maintenance in full force and effect of all governmental approvals, stamps, consents, licenses, authorizations, declarations, filings, and registrations as may be necessary or advisable for the performance of all the terms and conditions of this Agreement, including, but not limited to, all approvals which may be required to realize the intent and purpose of this Agreement.

SCHEDULE A

PROGRAM SCHEDULE – GOODDATA FREE

The Parties agree that this Program Schedule (“Schedule A”) is governed by the GOODDATA FREE TERMS OF USE (“Agreement”) between the Parties. In the event of an inconsistency between the terms of Schedule A and the Agreement, the terms of this Schedule A will prevail. Capitalized terms set forth herein are either defined in the Agreement or defined herein.

1. DEFINITIONS

1.1. Workspaces delivers the analytics service to each User. All Workspace limitations are otherwise subject to the Platform Limits outlined in Section 3 of this Schedule A.

1.2. Workspace Data Upload Rate means the daily average of the number of Customer Data uploads into a Workspace measured on a monthly basis.

1.3. Users mean Your and/or Your Customers’, employees, consultants, contractors, or agents who are authorized by Your or Yours Affiliates to access and use the Subscription Services and who have been supplied user identifications and passwords by You for such purpose, in accordance with this Schedule A.

1.4. Workspace Customer Data Size means the total size of Customer Data uncompressed stored analytic data in the Workspace database. Technical artifacts like indexes, projections, and caches are not included.

2. PRODUCT OFFERING

GOODDATA FREE includes the following:

3. NO FEES, PRODUCT TERMS, CONDITIONS, AND RESTRICTIONS

3.1.  GOODDATA FREE. GOODDATA FREE entitles You to general system access to GoodData’s analytics platform, the related platform infrastructure, user interface capabilities, and GOODDATA FREE Support, each in accordance with Documentation and within the limits prescribed by Section 2.4 of this Schedule A, free of any charge for a period of six (6) months from the effective date of this Schedule A (the “Term”). GoodData reserves the right, in its sole and absolute discretion, to terminate GOODDATA FREE or modify, update, or change the terms and conditions of this offering.

3.2.  GOODDATA FREE Workspaces. Subject to the terms and conditions of the Agreement and this Schedule A, You are entitled to access and use five (5) GOODDATA FREE Workspaces, free of any charge.  GOODDATA FREE Workspaces are limited to:  (a) Workspace Customer Data Size of up to 100MB per Workspace; (b) daily Workspace Data Upload Rate of four (4) uploads; and (c) computational power level that permits the processing of up to two (2) simultaneous individual reports.

3.3.  Data Source. Amazon Redshift, Snowflake, and Google BigQuery are the only data sources from which You may load data to GoodData FREE Workspaces. You may also load data to GOODDATA FREE Workspaces from CSV files.

3.4.  Platform Limits. Unless further limited under this Schedule A, or otherwise set forth herein, Your usage of GOODDATA FREE is subject to the applicable technical limits outlined in GoodData’s Platform Limits: https://help.gooddata.com/display/doc/Platform+Limits. The provisions relating to Data Warehouse Store, Data Transformation, and Workspace Loading are not applicable to GOODDATA FREE. Where Your usage exceeds Platform Limits (“Excess Usage”), GoodData is not liable for impact on product performance and may limit your Excess Usage to in accordance with Platform Limits.

3.5.  **Other Limitations on GOODDATA FREE. **

3.5.1. Availability. GoodData will make commercially-reasonable efforts to makes the Subscription Services available with minimal downtime, but it makes no guarantees of uptime availability for GOODDATA FREE.

3.5.2. Services. GoodData does not offer configuration services, data backup and restore functionalities, or lifecycle management (LCM) for GOODDATA FREE.

3.5.3. Brazil. If you are located in Brazil and are currently a customer, or become a customer, of TOTVS S.A., and wish to purchase Subscription Services in conjunction with Your purchase of TOTVS S.A. services, You are rendered ineligible for GOODDATA FREE. GoodData reserves the right, in its sole and absolute discretion, to terminate the Agreement and assist You to purchase the Subscription Services through TOTVS S.A.

3.5.4. Upgrades and Downgrades. If You have purchased Subscription Services in the last twelve (12) months, You are rendered ineligible for GOODDATA FREE. GoodData reserves the right, in its sole and absolute discretion, to terminate the Agreement.

3.6.  Overage. If Your use of GOODDATA FREE exceeds the limitations set forth herein, including without limitation the 100MB per Workspace Customer Data Size, daily Workspace Data Upload Rate, or computational power, or otherwise negatively impacts others’ use of GOODDATA FREE, then GoodData will provide a notice by e-mail to the email and headquarters registration address designated by You.  You have the options of (a) reducing Your use of GOODDATA FREE to within the limitations set forth herein, or (b) upgrading to GOODDATA GROWTH, which requires payment at the fee schedule to be provided in the notice.  If, within 15 days after GoodData’s notice, You have not reduced the level of Your use of GOODDATA FREE as set forth herein, GoodData will invoice You the amount commensurate with Your usage level of the GoodData platform and Workspaces, and You hereby agree to pay for such use under GOODDATA GROWTH fee schedule. Once You have been upgraded to GOODDATA GROWTH, You are not eligible for GOODDATA FREE for twelve (12) months following Your upgrade.

3.7.  No back-up. GoodData is not responsible for back-up of Your Subscription Services  or Customer Data.  [All Customer Data will be deleted within [x] days from the effective date of expiration or termination of this Schedule A unless Customer accepts the terms and conditions applicable to GoodData Growth prior to the end of such [x] day grace period.]

3.8.  Termination for Inactivity. GoodData reserves the right to terminate Your access to the GoodData platform and the GOODDATA FREE Workspaces if there is no upload or report computation activity for thirty (30) consecutive days.

4. SUPPORT

GoodData will address Your support requests in accordance with Schedule B of the Agreement.  GOODDATA FREE Support is only provided for up to six consecutive months following the effective date of this Schedule. In no event will GoodData provide GOODDATA FREE Support after six months from the Effective Date, regardless of the Term of the Agreement and even if Your account is inactivated and then reactivated for any reason.

SCHEDULE B

GOODDATA FREE - SUPPORT POLICY

1. Scope of Support.

1.1.  You shall be responsible for providing basic “First Level” support to Your Users, including receipt of initial support calls and basic problem identification and diagnosis.  In the event that You, after providing basic support, are unable to resolve technical issues, GoodData shall provide You with reasonable back-up support in accordance with this GoodData Support Policy. GoodData support services (“Support”) are intended to assist You in troubleshooting and resolving specific issues relating to You and Your Users’ use of the Subscription Services. GoodData will partner with You in the resolution of issues directly involving the Subscription Services that You are unable to resolve.  You are expected to fulfill reasonable troubleshooting tasks as recommended by GoodData Support staff.

1.2.  Support does not include assistance with or support for non-GoodData products, services or technologies, including databases, computer networks, communications systems, computers, hard drives, networks or printers.

1.3.  You may obtain Support through a variety of contact methods, which include access to online product forums (knowledge base), online Support requests, and email Support requests. GoodData reserves the right to request access to a User’s Subscription Service environment to help troubleshoot any issues, and GoodData may not be able to troubleshoot the issue if such access is not approved by You. GoodData will use commercially reasonable efforts to provide Support, and does not guarantee that it will fix any or all Subscription Services defects or make changes to the Subscription Services.

1.4.  In connection with GoodData’s data center operations, You specifically consent to and grant GoodData’s worldwide service personnel the express right to access, troubleshoot and provide technical support or implementation services related to any Customer Data that is stored, managed and processed in GoodData’s data centers.

1.5.  GoodData reserves the right to modify, change and update this Support Policy at any time, at its sole and exclusive discretion. GoodData will provide You notice of material changes to this Support Policy on the GoodData Support portal.  Your continued use of the Subscription Services after receiving such notice shall constitute your acceptance of any such changes to this Support Policy.

2. Contacting GoodData Support.

2.1.  Online Support Portal.

You will have login access to the GoodData Support portal, which provides access to the Documentation, and an online form for submitting Support tickets. The GoodData Support portal is located at https://support.gooddata.com.

2.2.  Email Support.

GoodData will provide You with access to Support via email. Support tickets are created for all requests received at support@gooddata.com, or https://support.gooddata.com/hc/en-us/requests/new?ticket_form_id=582387.

3. How Requests Are Logged and Tracked.

For each specific Support request, the GoodData Support team creates a Support ticket and assigns a Support request number. If You call or email with several different issues, GoodData may create different Support request numbers to track each individual issue. Responses to Support emails are automatically logged with the original request.

SCHEDULE C

GOODDATA DATA PROCESSING ADDENDUM WITH CONTROLLERS/GOODDATA CUSTOMERS

This Data Processing Addendum is incorporated into and made part of the GOODDATA FREE PACKAGE TERMS OF USE (“Agreement”) by and between You (hereinafter referred to as, “Customer”, “Data Exporter” or “Controller”) and GoodData Corporation (referred to hereafter as “GoodData”, “Processor” or “Importer”) (each, a “Party” and together, the “Parties”) and is subject to and governed by the Agreement. In the event of any conflict between this Addendum and any data processing terms contained in the Agreement between the organizations hereto, the terms of this Addendum regarding the transfer of personal data shall control and supersede the terms set forth in the original Agreement.  Capitalized terms not otherwise defined herein shall have the meaning set forth in the Agreement, the GDPR, or the CCPA, as applicable.

1. DEFINITIONS. All capitalized terms used in this Addendum shall have the meanings given to them below:

1.1  Applicable Data Protection Law: means all applicable international, federal, national and state privacy and data protection laws that apply to the processing of Personal Data that is the subject matter of the Agreement (including, where applicable, European Data Protection Law and the CCPA).

1.2  CCPA: CCPA: the terms and conditions relating to compliance with the California Consumer Privacy Act of 2018, Cal. Civil Code § 1798.100 et seq.

1.3  Controller: means the entity that determines the purposes and means of the processing of Personal Data, and for the purposes of this Agreement means Customer.

1.4  European Data Protection Law: means the EU General Data Protection Regulation 2016/679 ("GDPR") and any applicable national laws made under the GDPR.

1.5  Personal Data: means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

1.6  Processor: means an entity that processes Personal Data on behalf of the Controller or its subscribers.

1.7  Standard Contractual Clauses: means the standard contractual clauses for the transfer of personal data to processors established in third countries, pursuant to the European Commission Decision C(2010)593, as attached at Annex A.

2. DATA PROTECTION

2.1  Relationship of the Parties: As between the Parties, Customer is the Controller and appoints GoodData as a Processor to process the Personal Data described in Appendix 1 to Annex A (the "Data").

2.2  Purpose limitation: GoodData shall process the Data as a Processor only for the purposes described in Appendix 1 to Annex A, and strictly in accordance with the documented instructions of Customer (the "Permitted Purpose").  In no event shall GoodData process the Data for its own purposes or those of any third party. Customer agrees and acknowledges that Customer will confer with GoodData and will obtain GoodData’s prior written consent before Customer loads any Data deemed to be included in “Special Categories of Personal Data” under GDPR (e.g. data consisting of racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data, data concerning health or data concerning a natural person's sex life or sexual orientation) onto GoodData’s data processing platform.

2.3  International transfers of Data: GoodData will at all times provide an adequate level of protection for the Data, wherever processed, in accordance with the requirements of Applicable Data Protection Law. Without limiting the generality of the foregoing, GoodData shall not process or transfer any Data originating from the European Economic Area (EEA) in or to a territory which has not been designated by the European Commission as providing an adequate level of data protection or a territory that is not subject to a bilateral arrangement such as the EU-US Privacy Shield that provides a legal basis for Data transfers based on GoodData’s adherence to applicable Privacy Shield principles unless: (i) it has first obtained Customer's prior written consent; and (ii) it executes and complies with its obligations under the Standard Contractual Clauses attached at Annex A (including its Appendices), which shall form an integral part of this Agreement. In the event of any conflict between the Standard Contractual Clauses and this Agreement, the Standard Contractual Clauses shall control and supersede.

2.4  Confidentiality of processing: GoodData shall keep strictly confidential all Personal Data that it processes on behalf of Customer. GoodData shall ensure that any person that it authorises to process the Data (including GoodData's staff, agents and subcontractors) (an "Authorised Person") shall be subject to a strict duty of confidentiality (whether a contractual duty or a statutory duty), and shall not permit any person to process the Data who is not under such a duty of confidentiality. GoodData shall ensure that only Authorised Persons will have access to, and process, the Data, and that such access and processing shall be limited to the extent strictly necessary to achieve the Permitted Purpose.  GoodData accepts responsibility for any breach of this Agreement caused by the act, error or omission of an Authorised Person.

2.5  Prohibition on Selling Information of California residents: For avoidance of doubt, GoodData is a Service Provider and not a Third Party as described in the CCPA.  Therefore, GoodData shall not: (i) sell the Personal Information, (ii)  retain, use, or disclose the Personal Information for any purpose other than providing the services specified in the Agreement or for a Business Purpose. Specifically, GoodData shall not retain, use, or disclose the Personal Information for a Commercial Purpose, or (iii)  retain, use, or disclose the Personal Information outside of the direct business relationship between GoodData and Company.  Notwithstanding anything in the Addendum or any related order form or other document, the parties acknowledge and agree that Company’s provision of access to Personal Information is not part of and explicitly excluded from the exchange of consideration, or any other thing of value, between the parties. (Capitalized terms used in this Section 2.5 shall have the meaning set forth in the CCPA.)

2.6  Security: GoodData shall implement appropriate technical and organisational measures to protect the Data from (i) accidental or unlawful destruction, and (ii) loss, alteration, unauthorised disclosure of, or access to the Data (a "Security Incident").  At a minimum, such measures shall include the security measures identified in Appendix 2 to Annex A, and as further described in the Documentation to the Agreement.

2.7  Subcontracting: GoodData shall not subcontract any processing of the Data to a third party sub-Processor without the prior written consent of Customer. Notwithstanding the foregoing, Customer consents to GoodData engaging third party sub-Processors to process the Data listed at https://www.gooddata.com/subprocessors. If Customer objects to GoodData's appointment of a new third party sub-Processor on reasonable grounds relating to the protection of the Data, then either GoodData will not appoint the sub-Processor or the parties will promptly confer and discuss alternative arrangements to enable GoodData to continued processing of Data. In all cases, GoodData shall impose the same data protection terms on any sub-Processor it appoints as those provided for by this Agreement and GoodData shall remain fully liable for any breach of this Agreement that is caused by an act, error or omission of its sub-Processor.

2.8  Cooperation and Individuals' rights: To extent Customer is unable to directly respond to a privacy inquiry made by a data subject itself, GoodData shall then provide all reasonable and timely assistance to Customer to enable Customer to respond to: (i) any request from an individual to exercise any of its rights under Applicable Data Protection Law; and (ii) any other correspondence, enquiry or complaint received from an individual, regulator, court or other third party in connection with the processing of the Data.  In the event that any such communication is made directly to GoodData, GoodData shall promptly inform Customer providing full details of the same and shall not respond to the communication unless specifically required by law or authorized by Customer.

2.9  Data Protection Impact Assessment: If GoodData believes or becomes aware that its processing of the Data is likely to result in a high risk to the data protection rights and freedoms of individuals, it shall promptly inform Customer of the same. GoodData shall provide Customer with all such reasonable and timely assistance as Customer may require in order to conduct a data protection impact assessment, and, if necessary, to consult with its relevant data protection authority.

2.10  Security Incidents: Upon becoming aware of a Security Incident, GoodData shall inform Customer without undue delay (and, in any event, within five (5) business day unless otherwise required sooner under applicable laws) and shall provide all such timely information and cooperation as Customer may reasonably require in order for Customer to fulfil its data breach reporting obligations under (and in accordance with the timescales required by) Applicable Data Protection Law and relevant contractual obligations owed by Customer to its users and subscribers.  GoodData shall further take all such measures and actions as are necessary to remedy or mitigate the effects of the Security Incident and shall keep Customer informed of all developments in connection with the Security Incident.  GoodData shall not notify any third parties of a Security Incident affecting the Data unless and to the extent that: (a) Customer has agreed to such notification, and/or (b) notification is required to be made by GoodData under Applicable Data Protection Laws.

2.11 Deletion or return of Data: Upon termination or expiry of the Agreement, GoodData shall (at Customer's election) destroy or enable Customer to retrieve all Data (including all copies of the Data) in its possession or control (including any Data subcontracted to a third party for processing).  Unless agreed to otherwise in the underlying agreement between the Parties, GoodData shall enable Customer to retrieve Customer’s Data within thirty (30) days of Customer’s request. GoodData shall delete all Data within the GoodData platform within thirty (30) days of the termination of this Addendum or the Agreement, or upon Customer’s written request.  This requirement shall not apply to the extent that GoodData is required by applicable law to retain some or all of the Data, in which event GoodData shall isolate and protect the Data from any further processing except to the extent required by such law.

2.12 Compliance Assessments: No more than once per year, solely for the purpose of meeting its audit requirements under Article 28, section 3(h) of the GDPR or its obligations under 5(f) and 12(2) of the Standard Contract Clauses, Customer may request an audit in writing.  GoodData shall then permit Customer (or its appointed third-party auditors) to review GoodData’s SOC-2, Type II or similar audit report and relevant security and compliance documentation, including but not limited to self-assessment questionnaires and security testing results. GoodData shall also respond to any written audit questions submitted to it by Customer. Customer will be entitled to this information once in any twelve (12) calendar month period, except if and when required by the instruction of a competent data protection authority. The Customer agrees that these reports and other documentation will be used as the primary and only mechanism to audit and inspect GoodData’s processing activities, unless Customer is required to perform an on-site audit by the applicable data protection authority, or if GoodData materially fails to comply with GDPR negatively impacting Customer’s Data. In the event that Customer requires an on-site audit of the procedures relevant to the protection of Customer Personal Data, then such audits requested must meet the following requirements:

2.12.1 Any audit must be requested with at least one month's notice and include a detailed audit plan that describes the proposed scope, duration, reimbursement rates, and start date of the audit which the parties must mutually agree upon prior to the commencement of an audit. Audit requests must be sent to security@gooddata.com.

2.12.2  The auditor must execute a written GoodData-form confidentiality agreement prior to conducting the audit.

2.12.3  The audit must be conducted during regular business hours, subject to GoodData’s policies, and may not unreasonably interfere with GoodData's business activities.

2.12.4 Customer will reimburse GoodData for any time expended at its then-current reasonable professional services and support rates, made available to Customer upon request. All reimbursement rates will be reasonable and take into account the resources expended by GoodData.

2.12.5 For all audits, Customer must immediately notify GoodData with information regarding any suspected or actual non-compliance revealed during an audit.  Any information resulting or derived from any audit under this Section 2.12 including any Customer analyses, notes, assessments or other materials in whatever form or media constitute GoodData Confidential Information subject to applicable protections defined in the Agreement.

2.13 General cooperation to remediate: In the event that Applicable Data Protection Law, or a data protection authority or regulator, provides that the transfer or processing of Personal Data under this Addendum is no longer lawful or otherwise permitted, then the Parties shall agree to remediate the processing (by amendment to this Addendum or otherwise) in order to meet the necessary standards or requirements. If GoodData is unable to remediate the processing within the applicable cure period set forth in the Agreement, then Customer will be entitled to terminate the Agreement (and any other agreement between the Parties relating to the provision of services by GoodData to Customer) in accordance with Section 11 (or Termination provision) of the Agreement.

3. TERM

3.1 The obligations placed upon the GoodData under this Addendum shall survive so long as GoodData and/or its sub-Processors process Personal Data on behalf of Customer.

ANNEX A

Standard Contractual Clauses

For the purposes of Article 26(2) of Directive 95/46/EC for the transfer of personal data to processors established in third countries which do not ensure an adequate level of data protection, the entity identified as “You” in the Agreement (referred to herein as "Customer" or “the data exporter”) and GoodData Corporation (referred to herein as “GoodData” or “the data importer”) (each, a “party”; together “the parties”) HAVE AGREED on the following Contractual Clauses (the “Clauses”) in order to adduce adequate safeguards with respect to the protection of privacy and fundamental rights and freedoms of individuals for the transfer by the data exporter to the data importer of the personal data specified in Appendix 1.

1. Definitions:

For the purposes of the Clauses:
'personal data', 'special categories of data', 'process/processing', 'controller', 'processor', 'data subject' and 'supervisory authority' shall have the same meaning as in the applicable data protection law on the protection of individuals with regard to the processing of personal data and on the free movement of such data.
'the data exporter' means the controller who transfers the personal data.
'the data importer' means the processor who agrees to receive from the data exporter personal data intended for processing on his behalf after the transfer in accordance with his instructions and the terms of the Clauses and who is not subject to a third country's system ensuring adequate protection within the meaning of Article 25(1) of Directive 95/46/EC.
'the subprocessor' means any processor engaged by the data importer or by any other subprocessor of the data importer who agrees to receive from the data importer or from any other subprocessor of the data importer personal data exclusively intended for processing activities to be carried out on behalf of the data exporter after the transfer in accordance with his instructions, the terms of the Clauses and the terms of the written subcontract.
'the applicable data protection law' means the legislation protecting the fundamental rights and freedoms of individuals and, in particular, their right to privacy with respect to the processing of personal data applicable to a data controller in the Member State in which the data exporter is established.
'technical and organizational security measures' means those measures aimed at protecting personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing.

2. Details of the transfer

The details of the transfer and in particular the special categories of personal data where applicable are specified in Appendix 1 which forms an integral part of the Clauses.

3. Third-party beneficiary clause

3.1  The data subject can enforce against the data exporter this Clause, Clause 4(b) to (i), Clause 5(a) to (e), and (g) to (j), Clause 6(1) and (2), Clause 7, Clause 8(2), and Clauses 9 to 12 as third-party beneficiary.

3.2  The data subject can enforce against the data importer this Clause, Clause 5(a) to (e) and (g), Clause 6, Clause 7, Clause 8(2), and Clauses 9 to 12, in cases where the data exporter has factually disappeared or has ceased to exist in law unless any successor entity has assumed the entire legal obligations of the data exporter by contract or by operation of law, as a result of which it takes on the rights and obligations of the data exporter, in which case the data subject can enforce them against such entity.

3.3  The data subject can enforce against the subprocessor this Clause, Clause 5(a) to (e) and (g), Clause 6, Clause 7, Clause 8(2), and Clauses 9 to 12, in cases where both the data exporter and the data importer have factually disappeared or ceased to exist in law or have become insolvent, unless any successor entity has assumed the entire legal obligations of the data exporter by contract or by operation of law as a result of which it takes on the rights and obligations of the data exporter, in which case the data subject can enforce them against such entity. Such third-party liability of the subprocessor shall be limited to its own processing operations under the Clauses.

3.4 The parties do not object to a data subject being represented by an association or other body if the data subject so expressly wishes and if permitted by national law.

4. Obligations of the data exporter

The data exporter agrees and warrants:

​(a)  that the processing, including the transfer itself, of the personal data has been and will continue to be carried out in accordance with the relevant provisions of the applicable data protection law (and, where applicable, has been notified to the relevant authorities of the Member State where the data exporter is established) and does not violate the relevant provisions of that State;

​(b)  that it has instructed and throughout the duration of the personal data processing services will instruct the data importer to process the personal data transferred only on the data exporter's behalf and in accordance with the applicable data protection law and the Clauses;

​(c)  that the data importer will provide sufficient guarantees in respect of the technical and organizational security measures specified in Appendix 2 to this contract;

​(d)  that after assessment of the requirements of the applicable data protection law, the security measures are appropriate to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing, and that these measures ensure a level of security appropriate to the risks presented by the processing and the nature of the data to be protected having regard to the state of the art and the cost of their implementation;

​(e)  that it will ensure compliance with the security measures;

​(f)  that, if the transfer involves special categories of data, the data subject has been informed or will be informed before, or as soon as possible after, the transfer that its data could be transmitted to a third country not providing adequate protection within the meaning of Directive 95/46/EC;

​(g)  to forward any notification received from the data importer or any subprocessor pursuant to Clause 5(b) and Clause 8(3) to the data protection supervisory authority if the data exporter decides to continue the transfer or to lift the suspension;

​(h)  to make available to the data subjects upon request a copy of the Clauses, with the exception of Appendix 2, and a summary description of the security measures, as well as a copy of any contract for sub-processing services which has to be made in accordance with the Clauses, unless the Clauses or the contract contain commercial information, in which case it may remove such commercial information;

​(i)  that, in the event of subprocessing, the processing activity is carried out in accordance with Clause 11 by a subprocessor providing at least the same level of protection for the personal data and the rights of data subject as the data importer under the Clauses; and

​(j)  that it will ensure compliance with Clause 4(a) to (i).

5. Obligations of the data importer

The data importer agrees and warrants:

​(a)  to process the personal data only on behalf of the data exporter and in compliance with its instructions and the Clauses; if it cannot provide such compliance for whatever reasons, it agrees to inform promptly the data exporter of its inability to comply, in which case the data exporter is entitled to suspend the transfer of data and/or terminate the contract;

​(b)  that it has no reason to believe that the legislation applicable to it prevents it from fulfilling the instructions received from the data exporter and its obligations under the contract and that in the event of a change in this legislation which is likely to have a substantial adverse effect on the warranties and obligations provided by the Clauses, it will promptly notify the change to the data exporter as soon as it is aware, in which case the data exporter is entitled to suspend the transfer of data and/or terminate the contract;

​(c) that it has implemented the technical and organizational security measures specified in Appendix 2 before processing the personal data transferred;

​(d)  that it will promptly notify the data exporter about:

​(i) any legally binding request for disclosure of the personal data by a law enforcement authority unless otherwise prohibited, such as a prohibition under criminal law to preserve the confidentiality of a law enforcement investigation,

​(ii) any accidental or unauthorized access, and

​(iii) any request received directly from the data subjects without responding to that request, unless it has been otherwise authorized to do so;

​(e)  to deal promptly and properly with all inquiries from the data exporter relating to its processing of the personal data subject to the transfer and to abide by the advice of the supervisory authority with regard to the processing of the data transferred;

​(f)  at the request of the data exporter to submit its data processing facilities for audit of the processing activities covered by the Clauses which shall be carried out by the data exporter or an inspection body composed of independent members and in possession of the required professional qualifications bound by a duty of confidentiality, selected by the data exporter, where applicable, in agreement with the supervisory authority;

​(g)  to make available to the data subject upon request a copy of the Clauses, or any existing contract for subprocessing, unless the Clauses or contract contain commercial information, in which case it may remove such commercial information, with the exception of Appendix 2 which shall be replaced by a summary description of the security measures in those cases where the data subject is unable to obtain a copy from the data exporter;

​(h)  that, in the event of subprocessing, it has previously informed the data exporter and obtained its prior written consent;

​(i)  that the processing services by the subprocessor will be carried out in accordance with Clause 11; and

​(j)  to send promptly a copy of any subprocessor agreement it concludes under the Clauses to the data exporter.

6. Liability

6.1  The parties agree that any data subject, who has suffered damage as a result of any breach of the obligations referred to in Clause 3 or in Clause 11 by any party or subprocessor is entitled to receive compensation from the data exporter for the damage suffered.

6.2  If a data subject is not able to bring a claim for compensation in accordance with paragraph 6.1 against the data exporter, arising out of a breach by the data importer or his subprocessor of any of their obligations referred to in Clause 3 or in Clause 11, because the data exporter has factually disappeared or ceased to exist in law or has become insolvent, the data importer agrees that the data subject may issue a claim against the data importer as if it were the data exporter, unless any successor entity has assumed the entire legal obligations of the data exporter by contract or by operation of law, in which case the data subject can enforce its rights against such entity.

6.3  The data importer may not rely on a breach by a subprocessor of its obligations in order to avoid its own liabilities.

6.4  If a data subject is not able to bring a claim against the data exporter or the data importer referred to in paragraphs 6.1 and 6.2, arising out of a breach by the subprocessor of any of their obligations referred to in Clause 3 or in Clause 11 because both the data exporter and the data importer have factually disappeared or ceased to exist in law or have become insolvent, the subprocessor agrees that the data subject may issue a claim against the data subprocessor with regard to its own processing operations under the Clauses as if it were the data exporter or the data importer, unless any successor entity has assumed the entire legal obligations of the data exporter or data importer by contract or by operation of law, in which case the data subject can enforce its rights against such entity. The liability of the subprocessor shall be limited to its own processing operations under the Clauses.

7. Mediation and jurisdiction

7.1 The data importer agrees that if the data subject invokes against it third-party beneficiary rights and/or claims compensation for damages under the Clauses, the data importer will accept the decision of the data subject:

​(a)  to refer the dispute to mediation, by an independent person or, where applicable, by the supervisory authority;

​(b)  to refer the dispute to the courts in the Member State in which the data exporter is established.

7.2 The parties agree that the choice made by the data subject will not prejudice its substantive or procedural rights to seek remedies in accordance with other provisions of national or international law.

8. Cooperation with supervisory authorities

8.1  The data exporter agrees to deposit a copy of this contract with the supervisory authority if it so requests or if such deposit is required under the applicable data protection law.

8.2  The parties agree that the supervisory authority has the right to conduct an audit of the data importer, and of any subprocessor, which has the same scope and is subject to the same conditions as would apply to an audit of the data exporter under the applicable data protection law.

8.3  The data importer shall promptly inform the data exporter about the existence of legislation applicable to it or any subprocessor preventing the conduct of an audit of the data importer, or any subprocessor, pursuant to paragraph 8.2. In such a case the data exporter shall be entitled to take the measures foreseen in Clause 5 (b).

9. Governing Law

The Clauses shall be governed by the law of the Member State in which the data exporter is established, namely ___________.

10. Variation of the contract

The parties undertake not to vary or modify the Clauses. This does not preclude the parties from adding clauses on business related issues where required as long as they do not contradict the Clause.

11. Subprocessing

11.1  The data importer shall not subcontract any of its processing operations performed on behalf of the data exporter under the Clauses without the prior written consent of the data exporter. Where the data importer subcontracts its obligations under the Clauses, with the consent of the data exporter, it shall do so only by way of a written agreement with the subprocessor which imposes the same obligations on the subprocessor as are imposed on the data importer under the Clauses. Where the subprocessor fails to fulfil its data protection obligations under such written agreement the data importer shall remain fully liable to the data exporter for the performance of the subprocessor's obligations under such agreement.

11.2  The prior written contract between the data importer and the subprocessor shall also provide for a third-party beneficiary clause as laid down in Clause 3 for cases where the data subject is not able to bring the claim for compensation referred to in paragraph 1 of Clause 6 against the data exporter or the data importer because they have factually disappeared or have ceased to exist in law or have become insolvent and no successor entity has assumed the entire legal obligations of the data exporter or data importer by contract or by operation of law. Such third-party liability of the subprocessor shall be limited to its own processing operations under the Clauses.

11.3  The provisions relating to data protection aspects for subprocessing of the contract referred to in paragraph 11.1 shall be governed by the law of the Member State in which the data exporter is established, namely ___________.

11.4  The data exporter shall keep a list of subprocessing agreements concluded under the Clauses and notified by the data importer pursuant to Clause 5 (j), which shall be updated at least once a year. The list shall be available to the data exporter's data protection supervisory authority.

12. Obligation after the termination of personal data processing services

12.1  The parties agree that on the termination of the provision of data processing services, the data importer and the subprocessor shall, at the choice of the data exporter, return all the personal data transferred and the copies thereof to the data exporter or shall destroy all the personal data and certify to the data exporter that it has done so, unless legislation imposed upon the data importer prevents it from returning or destroying all or part of the personal data transferred. In that case, the data importer warrants that it will guarantee the confidentiality of the personal data transferred and will not actively process the personal data transferred anymore.

12.2  The data importer and the subprocessor warrant that upon request of the data exporter and/or of the supervisory authority, it will submit its data processing facilities for an audit of the measures referred to in paragraph 12.1.

Appendix 1 to the Standard Contractual Clauses

This Appendix forms part of the Clauses and must be completed and signed by the parties.

The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix.

Data exporter

Each data exporter is either a member of the Customer group of companies whose ultimate parent company is Customer, or a subscriber of Customer's products and services.  The Customer group of companies provides and operates the Customer’s products and services.

Each data exporter wishes to appoint the data importer to provide it with data processing services.  The role of the data importer, the nature of the data processing services it will provide, the categories of data that it will process, and the protections it will apply to protect those data are set out in the Appendices 1 and 2 to these Clauses.

Data importer

The data importer is a service provider which processes Personal Data upon the instruction of the data exporter in accordance with the terms of the agreement between Customer and data importer relating to the provision of services by data importer to Customer.

Data subjects

The personal data transferred concern the following categories of data subjects:

Data exporter may transfer Personal Data to data importer, the extent of which is determined and controlled by data exporter in its sole discretion, and which may include, but is not limited to Personal Data relating to the following categories of data subjects:

• Prospects, customers, business partners and vendors of data exporter (who are natural persons);
• Employees or contact persons of data exporter’s prospects, customers, business partners and vendors; and
• Employees, agents, advisors, freelancers of data exporter (who are natural persons).

Categories of data

The personal data transferred concern the following categories of data:

Data exporter may transfer Personal Data to data importer, the extent of which is determined and controlled by data exporter in its sole discretion, and which may include, but is not limited to the following categories of Personal Data:

• First and last name
• Title
• Position
• Employer
• Contact information (company, email, phone, physical business address)
• ID data
• Professional life data
• Personal life data (including but not limited to home addressed, personal phone numbers, resumes, attendance records, bank details, medical information)
• Connection data
• Localization data

Special categories of data (if appropriate)

The personal data transferred concern the following special categories of data: n/a

Processing operations

The personal data transferred will be subject to the following basic processing activities:

The objective of Processing of Personal Data by the data importer is the performance of the data importer’s services pursuant to the agreement between Customer and the data importer relating to the provision of services by the data importer to Customer.

Appendix 2 to the Standard Contractual Clauses

This Appendix forms part of the Clauses and must be completed and signed by the parties.

Description of the technical and organizational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c) (or document/legislation attached):

​1. Physical Access Controls: the data importer shall take reasonable measures to prevent physical access, such as security personnel and secured buildings and factory premises, to prevent unauthorized persons from gaining access to personal data.

​2. System Access Controls: the data importer shall take reasonable measures to prevent personal data from being used without authorization. These controls shall vary based on the nature of the processing undertaken and may include, among other controls, authentication via passwords and/or two-factor authentication, documented authorization processes, documented change management processes and/or, logging of access on several levels.

​3. Data Access Controls: the data importer shall take reasonable measures to provide that personal data is accessible and manageable only by properly authorized staff, direct database query access is restricted and application access rights are established and enforced to ensure that persons entitled to use a data processing system only have access to the personal data to which they have privilege of access; and, that personal data cannot be read, copied, modified or removed without authorization in the course of processing.  In addition to the access control rules set forth in Sections 1-3 above, data importer implements an access policy under which access to its system environment, to personal data and other data by authorized personnel only.

​4. Transmission Controls: the data importer shall take reasonable measures to ensure that it is possible to check and establish to which entities the transfer of personal data by means of data transmission facilities is envisaged so personal data cannot be read, copied, modified or removed without authorization during electronic transmission or transport.

​5. Input Controls: the data importer shall take reasonable measures to provide that it is possible to check and establish whether and by whom personal data has been entered into data processing systems, modified or removed. Data importer shall take reasonable measures to ensure that (i) the personal data source is under the control of data exporter; and (ii) personal data integrated into data importer’s systems is managed by secured file transfer from the data importer and data subject.

​6. Data Backup: the data importer shall ensure that back-ups are taken on a regular basis, are secured, and encrypted when storing personal data to protect against accidental destruction or loss when hosted by data importer.

​7. Logical Separation: the data importer shall ensure that data from the data exporter is logically segregated on the data importer’s systems to ensure that personal data that is collected for different purposes may be processed separately.