Data processing agreement
Where you use Example Company Ltd (private limited company) to process personal data of your own users, this agreement applies in addition to the terms. It is accepted together with the terms when you create an account; no signature is required, and we record the date and version.
Last updated August 8, 2026
Roles
You are the controller of the personal data you put into the service. We are the processor, and act on your instructions.
Scope of processing
We process that data only to provide the service: storing it, showing it back to you, and sending the messages you ask us to send.
Confidentiality and security
Access is limited to people who need it. Data in transit is encrypted. Primary storage is in European Union (Germany).
Subprocessors
The current list is published on the subprocessors page. We update it before a new provider starts processing, and notify account holders by email.
Assistance
We help you meet requests from data subjects and, where it applies to our processing, with assessments and audits.
Deletion and return
When the account ends, the data is deleted. Deleting your account removes stored files before the rows that reference them, because a file nobody can find is still personal data.
A signed copy
If your organisation needs a countersigned document, write to hello@example.com.
This page is a working skeleton. The facts in it are read from the code, but the final wording has to be reviewed by the owner before launch.