# Data processing agreement for privaci.io

> The data processing agreement between Privaci (processor) and the customer (controller) under Article 28 GDPR, including subprocessors and transfer grounds.

- URL: https://privaci.io/en/dpa/
- Sprog: English
- Sidst opdateret: 2026-09-21

Sections on this page:

- 1. The parties
- 1.1 Processor
- 1.2 Controller
- 2. Subject matter and purpose of the processing
- 2.1 Subject matter
- 2.2 Purposes of the processing
- 2.3 Instructions
- 3. Types of personal data
- 4. Categories of data subjects
- 5. Security measures
- 5.1 Technical measures
- 5.2 Organisational measures
- 6. Subprocessors
- 7. Transfers outside the EU/EEA
- 8. Deletion and return
- 8.1 Deletion on termination
- 8.2 Return
- 8.3 Ongoing retention periods
- 9. Audit and inspection
- 10. Rights of data subjects
- 11. Personal data breaches
- 12. Liability and indemnity
- 13. Duration and termination
- 14. Governing law and venue
- 15. Signature