Data Processing agreement (English)

1. Purpose

This Data Processing Agreement (“DPA”) governs the processing of Personal Data carried out by GolriGames SAS, operator of the ZeQuiz platform, on behalf of its clients.

For the purposes of Regulation (EU) 2016/679 (“GDPR”):

• the Client acts as the Data Controller;
• GolriGames acts as the Data Processor.

This DPA supplements the ZeQuiz Terms of Use.

2. Description of the Services

ZeQuiz is a Software-as-a-Service (SaaS) platform provided by GolriGames that enables organizers to create and host interactive quizzes accessible via a web browser.

The Services include, in particular:

• creating and managing quizzes;
• hosting real-time quiz sessions;
• enabling participation via mobile devices or computers;
• collecting information from participants where applicable;
• managing user accounts and subscriptions.

Personal Data is processed solely to the extent necessary to provide the Services.

3. Nature and Purpose of Processing

GolriGames processes Personal Data on behalf of the Client for the following purposes:

• providing and operating the platform;
• enabling participation in quiz sessions;
• storing data collected during sessions;
• transmitting results and collected data to the Client;
• ensuring the security of the Services;
• preventing fraud and misuse;
• maintaining and improving the Services.

4. Client Content and Data

In the course of using the Services, the Client may create, upload, and distribute content via the ZeQuiz platform, including quizzes, questions, answers, images, and data collection forms.

Such content and any Personal Data collected through the quizzes are determined and controlled by the Client.

GolriGames acts solely as a technical service provider supplying the infrastructure necessary to create and operate quizzes.

GolriGames shall not use such content or Personal Data for its own purposes, except where strictly necessary for the operation, security, and technical improvement of the Services.

The Client remains solely responsible for the lawfulness of the content published and the Personal Data collected via the platform.

5. Categories of Personal Data

Depending on the use of the Services, Personal Data processed may include:

Client / Organizer Data

• name
• email address
• telephone number
• billing information
• company details
• IP address

Participant Data

Depending on configuration defined by the Client:

• username or team name
• email address
• first name and/or last name
• telephone number
• specific identifiers (e.g., ticket number)
• answers and scores
• data submitted through forms

Technical Data

• IP address
• connection logs
• session data
• technical cookies
• browser and device information

6. Categories of Data Subjects

Data Subjects include:

• registered users of the platform;
• quiz organizers;
• quiz participants;
• website visitors or users of the Services.

7. Duration of Processing

Personal Data shall be processed for the duration necessary to provide the Services and in accordance with the Client’s instructions.

Certain technical data may be retained for security and operational purposes.

Personal Data shall be deleted upon account deletion or upon the Client’s request, subject to applicable legal retention obligations.

8. Instructions of the Client

GolriGames shall process Personal Data only on documented instructions from the Client and within the scope of the normal use of the Services.

The Client determines, in particular:

• the categories of data collected;
• the purposes of processing;
• retention periods;
• communications made to Data Subjects.

9. Client Obligations

The Client undertakes to:

• comply with applicable data protection laws;
• provide appropriate information to Data Subjects;
• obtain all required consents where necessary;
• refrain from collecting Special Categories of Personal Data within the meaning of Article 9 GDPR via the platform;
• not use the Services for unlawful purposes.

The Client remains solely responsible for the lawfulness of the processing carried out via its use of the Services.

10. GolriGames Obligations

GolriGames undertakes to:

• process Personal Data solely for the purpose of providing the Services;
• ensure the confidentiality of Personal Data;
• implement appropriate technical and organizational security measures;
• restrict access to Personal Data to authorized personnel only;
• notify the Client without undue delay in the event of a Personal Data Breach.

GolriGames shall not claim any ownership rights over Personal Data processed on behalf of the Client.

11. Sub-processors

GolriGames may engage sub-processors for the provision of the Services, including for:

• hosting;
• cloud infrastructure;
• payment processing;
• technical service providers.

GolriGames shall ensure that such sub-processors are bound by data protection obligations equivalent to those set out in this DPA.

12. Assistance

Taking into account the nature of the processing, GolriGames shall assist the Client, to the extent reasonably possible, in:

• responding to requests for exercising Data Subject rights;
• managing security incidents;
• ensuring compliance with GDPR obligations.

13. Security

GolriGames shall implement appropriate technical and organizational measures to protect Personal Data against:

• unauthorized or unlawful access;
• disclosure;
• accidental loss or destruction;
• alteration.

14. Return or Deletion of Data

Upon termination of the Services or upon the Client’s request, GolriGames shall, at the Client’s choice, delete or return all Personal Data within a reasonable timeframe, unless otherwise required by applicable law.

15. Contact

For any questions regarding data processing:

GolriGames SAS

Email: dpo@zequiz.com

Last updated: March 1, 2026