Last updated: October 14, 2024
Below, you will find the DPA format we are using. In case you will need a DPA, please contact us at privacy@codeture.nl
Data Processing Agreement (DPA)
Between:
- Controller: [Insert full legal name and address of the Client (the “Controller”)]
- Processor: Codeture BV, Gronausestraat 710 - 209, 7534 AM, Enschede, The Netherlands
- Effective Date: [Insert date]
1. Subject Matter and Duration
This DPA outlines the terms for Codeture BV’s processing of personal data on behalf of the Controller. Codeture BV will process personal data for the duration of the service contract.
2. Nature and Purpose of Processing
Codeture BV will process the personal data as necessary to provide services to the Controller, including processing customer data, payment data, and usage data, limited to the minimum required for the service.
3. Types of Personal Data and Data Subjects
- Types of personal data: Payment data, usage data, and customer data.
- Categories of data subjects: Customers only.
4. Subprocessors
The list of subprocessors Codeture BV works with can be found at www.codeture.nl/policies/company-processors. The Processor will inform the Controller of any intended changes concerning the addition or replacement of subprocessors.
5. Security Measures
Codeture BV implements appropriate technical and organizational measures to protect personal data, including encrypting privacy-sensitive data three times.
6. Data Transfers
Personal data may be transferred to countries outside the EEA, specifically the US and EU. Codeture BV ensures such transfers are protected by Standard Contractual Clauses (SCC).
7. Data Subject Rights
Codeture BV will assist the Controller in responding to any requests from data subjects exercising their rights under applicable data protection laws, including the right to access, correct, or delete personal data.
8. Breach Notification
In the event of a data breach, Codeture BV will notify the Controller within 72 hours of becoming aware of the breach.
9. Data Retention and Deletion
Codeture BV will retain personal data until the end of the contract. After termination, all personal data will either be returned or deleted unless otherwise required by law.
10. Liability and Indemnification
Both parties agree to indemnify and hold each other harmless from any claims, damages, or fines arising from the breach of this DPA or applicable data protection laws.
11. Governing Law
This DPA is governed by the laws of the Netherlands.