California Data Processing Agreement

This California Data Processing Addendum (“CDPA”) is effective upon execution of an Order Form to which references this CDPA (each, an “Agreement”), by and between Lucidworks, Inc. (“Lucidworks”) and the party named as Customer in the Agreement. Capitalized terms used but not defined in this CPDA shall have the meanings given to them in the Agreement. The parties intend this CDPA to be an extension of the Agreement that will outline certain requirements for the processing of any information which qualifies as Personal Information of a Consumer (as defined below) provided or made available by Customer, or collected or otherwise obtained by Lucidworks, in the course of providing Services to Customer.

  1. Definitions.
    1. “CCPA” means the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 as set forth in California Civil Code § 1798.100 et seq. and all other applicable laws or regulations relating to the Processing of Personal Information that may exist in the relevant jurisdiction.
    2. “Business,” “Business Purpose,” “Consumer,” “Person,” “Personal Information,” “Processed,” “Sell,” “Service Provider,” and “Third Party” shall have the meanings set forth in the CCPA.
    3. All other defined terms shall have the meanings set forth in the Agreement.
  2. Terms.
    1. The terms of this CDPA shall take effect upon the effective date of the Order Form and continue on concurrently for the term of the Agreement.
    2. The parties agree that Customer is a Business and Lucidworks is its Service Provider in relation to this CDPA and Personal Information that is Processed in the course of Lucidworks’ provision of the Services set forth in the Agreement. The parties agree to comply at all times with the applicable provisions of the CCPA in respect to the collection, transmission, and processing of all Personal Information exchanged or shared pursuant to the Agreement.
    3. The subject-matter of the Processing of Personal Information covered by this CDPA is the Services ordered by Customer through Lucidworks and provided by Lucidworks to Customer as set out in the Agreement.
    4. Lucidworks certifies that it understands the restrictions set forth in Section 1798.140(ag) of the CCPA and will comply with them.
    5. Lucidworks shall not Sell Personal Information.
    6. In respect of Personal Information Processed in the course of providing the Services, Lucidworks:
      1. shall Process Personal Information only in accordance with the documented instructions from Customer (as set out in this CDPA or the Agreement or as otherwise notified by Customer to Lucidworks from time to time); provided Lucidworks may Process Personal Information for Business Purposes under the CCPA or another applicable law or regulation, and in such cases Lucidworks will inform Customer of such requirement prior to the Processing unless that law prohibits this on important grounds of public interest;
      2. may hire other companies to provide limited services on its behalf, provided that Lucidworks complies with the provisions of this clause. Any such subcontractors will be permitted to Process Personal Information only to deliver the Services. Lucidworks remains responsible for its subcontractors’ compliance with the obligations of this CDPA, and Lucidworks shall ensure that any subcontractors to whom Lucidworks transfers Personal Information will have entered into written agreements with Lucidworks requiring that the subcontractor abide by terms substantially similar to this CDPA; and
      3. shall reasonably assist the Customer with its obligation to respond to requests from Consumers under the CCPA (including requests for information relating to the Processing, and requests relating to access, rectification, erasure, or portability of the Personal Information) provided that Lucidworks reserves the right to reimbursement from Customer for the reasonable cost of any time, expenditures, or fees incurred in connection with such assistance.
  3. Miscellaneous
    1. Except as expressly provided in this CDPA, the parties intend no amendment or modification of the Agreement or in such other addendum or supplement which may have been signed by the parties.
    2. Any notice to be provided under this CDPA to Customer shall be sent via email to the email address associated with Customer’s account.
    3. This CDPA supplements the terms of the Agreement. In the event of any conflict between this CDPA and the Agreement regarding the processing of Consumers’ Personal Information, the terms of this CDPA shall control.
    4. If any provision of this CDPA is held by a court of competent jurisdiction to be contrary to the law, the provision shall be modified by the court and interpreted so as best to accomplish the objectives of the original provision to the fullest extent permitted by law, and the remaining provisions of this CDPA shall remain in full force and effect.
    5. No waiver under this CDPA will be valid or binding unless set forth in writing and duly executed by the party against whom enforcement of such waiver is sought. Any such waiver will constitute a waiver only with respect to the specific matter described therein and will in no way impair the rights of the party granting such waiver in any other respect or at any other time. Any delay or forbearance by either party in exercising any right hereunder will not be deemed a waiver of that right.

last updated 4/1/2024