Editions of this agreement
Every published edition of this agreement stays retrievable, unchanged, together with a summary of what it changed. Your account is governed by the edition in force on the day you accepted it, and by each later edition once it takes effect.
Data Processing Agreement
Adds the capabilities you may switch on yourself — a contact directory, invitations to your forms, receipts a respondent asks for, a copy of their own answers that a respondent can download for themselves, and extended counters per form — and states what each of them discloses, and how long partly completed forms that a respondent saves are kept. Changes the inactivity auto-logout default from 2 hours to 24 hours, a setting you can change back at any time. Rewrites the change process itself: from now on only material changes — those that widen the processing or weaken a protection — require 30 days' notice; the right to object applies to sub-processor changes; a change that weakens a security measure or an encryption guarantee gives you a right to terminate before it takes effect; and every other change takes effect on publication as a new, dated edition. Audits become document-based and remote by default; the countersigned copy is provided electronically, with the factual annex at cost; the payment provider leaves the sub-processor table, as it processes only data for which Schweizerform is the controller, described in the privacy policy. This edition also condenses the text of sections 4, 6, 7, 11, 14 and 16: technical descriptions were shortened and implementation detail removed. No measure, no retention period and no obligation was changed by that.