Data Processing under Article 28 GDPR

In most cases, the GDPR requires customers (as controllers) and IT service providers (as processors) to enter into a data processing agreement (DPA). The obligation to conclude the agreement falls primarily on you as the customer. As your service provider, we are required to offer you an agreement. Failure to comply can result in a fine. To date, fines imposed in Germany have related exclusively to the absence of an agreement and have not concerned its terms.

To fulfil this obligation, we provide a template agreement.
You can download this template in either format

Please complete the sections highlighted in yellow and email the signed agreement to

We will promptly send you a countersigned copy.
We are also happy to use an agreement you have drafted, provided we find its terms acceptable after reviewing it.

Sub-processors

Our current sub-processors under paragraph 4 of the template agreement are