Data Processing Agreement (DPA)

This DPA is part of our service agreement with you.

Roles

• You = Controller (you decide what data is processed)
• We = Processor (we provide the hosting environment)

Subject of Processing

• Hosting and managing applications, domains, and related services

Sub-Processors

We rely on trusted providers:

• Hetzner (Germany)
• Netcup (Germany/Austria/Netherlands)
• Mailjet (France)
• Postmark (US, SCCs)
• Mollie (Netherlands)

Our Responsibilities

• Only process personal data on your instructions
• Keep your data secure (technical and organizational measures)
• Notify you without undue delay in case of a breach
• Assist you with GDPR rights requests where relevant
• Delete or return personal data upon termination, unless law requires retention

Your Responsibilities

• Make sure you’re allowed to process the data you put on our systems
• Inform your own users about data processing

International Transfers

• Only where necessary (Postmark, US). Covered by Standard Contractual Clauses.