This Data Processing Agreement (“DPA”) forms part of the Terms of Service ordered by the Customer  under an Order Form (the “Agreement”) between Puppet Vendors and the Customer. 

The parties expressly acknowledge and agree that: 

A. This DPA does not establish a joint controllership arrangement under Article 26 of the GDPR.  

B. Each party remains solely responsible for its own compliance with Applicable Data Protection Laws in respect of its separate processing activities. 

C. Puppet Vendors processes Customer Personal Data solely on behalf of and under the instructions of the  Customer. 

D. Puppet Vendors may process Service Data, Log Data, aggregated data, and de-identified data as an independent  controller solely for analytics, security, billing, and product-development purposes. 

E. Puppet Vendors does not engage in automated decision-making with legal or similarly significant effects on  Data Subjects. 


Data Processing Agreement