Data-processing addendum (summary)

For organizations using WUUUH with participants or employees:

• WUUUH processes personal data only to provide the service and per your documented instructions.

• Participant data is stored in the organization's country database; access is consent-scoped.

• You will not ask us to share participant-level data beyond the aggregate reporting WUUUH provides.

• We assist with data-subject requests and notify you of a personal-data breach without undue delay.

• Sub-processors: hosting (Hetzner), email (Resend or configured provider), payments (Stripe).

• This summary is reviewed by counsel before contract signature; a signed DPA supersedes it.