Data Processing Addendum, explained

Easy-to-understand explanation of how we handle personal data on your behalf.

The Data Processing Addendum (“DPA”) explains how coherence handles personal data on your behalf when you use our services. It’s here to make sure we both follow important privacy laws like the EU GDPR and UK GDPR.

The DPA spells out who is responsible for what, how your data is kept safe, and what happens if something goes wrong. It also covers things like data transfers, security, and people’s rights over their information. In short: this document is meant to give you peace of mind that your data and your players’ data is treated properly, securely, and legally.

What is this document?

The DPA is an extra agreement that works alongside your main contract with coherence (like our Terms of Service). It focuses only on data protection. If anything in your main contract conflicts with this DPA when it comes to personal data, the DPA takes priority.

Why does it exist?

The DPA is here to make sure everything we do with personal data is fully compliant with privacy laws. It sets out clear rules for how coherence handles data on your behalf, and it helps you stay compliant too.

When does it apply?

This DPA kicks in as soon as you accept our Terms of Service or otherwise sign an agreement that includes it. If you had an older data agreement with us, this one replaces it.

Who does what?

You (the Customer) are the Controller. That means you decide what personal data of your players (or end-users) is collected and how it should be used.

We (coherence) are the Processor. That means we only process personal data based on your instructions and in line with this DPA (for example storing player data on our servers).

What does the DPA cover?

Data transfers: If data needs to move outside the EU/UK, we make sure the right legal safeguards are in place.

Security: We protect data with strong technical and organizational measures, and act quickly if something goes wrong.

Subprocessors: If we ever need to work with trusted third parties, we’ll put agreements in place to ensure they meet the same standards.

Privacy rights: We’ll help you respond if someone asks to access, change, or delete their personal data.

Why it matters

At the end of the day, this DPA is about trust. It ensures your use of coherence is always backed by clear, lawful, and secure data practices. You can feel confident knowing that we’ll handle personal data carefully and responsibly, giving you and your players peace of mind.

This summary is meant to give you a clear overview of our Data Processing Addendum. It doesn’t replace or override the full, legally binding agreement. For all official terms, responsibilities, and legal details, please refer to the complete DPA available here.