Data Processing Addendum

Last updated June 2026

This Data Processing Addendum ("DPA") forms part of the agreement between REW and the publisher ("Customer") and applies where REW processes personal data on the Customer's behalf in connection with the services.

1. Definitions

"Personal Data", "Processing", "Controller", and "Processor" have the meanings given under applicable data protection laws, including the GDPR and CCPA.

2. Roles of the Parties

The Customer acts as Controller and REW acts as Processor with respect to Personal Data processed under the services, except where REW acts as an independent Controller for fraud prevention and compliance.

3. Scope & Purpose of Processing

REW processes Personal Data only to provide the monetization services, in accordance with the Customer's documented instructions and these terms.

4. Security Measures

REW implements appropriate technical and organizational measures, including encryption, access controls, and monitoring, to protect Personal Data.

5. Sub-processors

The Customer authorizes REW to engage sub-processors (including advertising platforms such as Google) under written terms consistent with this DPA.

6. Data Subject Rights

REW will assist the Customer, where reasonably possible, in responding to requests from individuals exercising their data protection rights.

7. International Transfers

Where Personal Data is transferred internationally, the parties rely on appropriate safeguards such as Standard Contractual Clauses.

8. Contact

For DPA requests, contact info@rew.com.