Data processing agreement
The data processing agreement under Article 28 GDPR that covers the data a workspace saves on a paid plan: projects, files, suppliers and documents.
The free checker processes files only on your device, so no data processing agreement is needed for it: we never receive the data.
On paid plans we store data you choose to save: projects, files received through supplier links, documents, declarations and reports. For that data you are the controller and we are your processor, under Article 28 GDPR, on these terms:
- Subject and purpose. We process the data only to provide the service, on your documented instructions (your use of the app and the API), for as long as your subscription lasts.
- Data and data subjects. Producer, supplier and contact names, email addresses and plot locations, and the users of your workspace.
- Confidentiality. Only staff who need access to run the service have it, and they are bound to confidentiality.
- Security. Data is stored in the European Union, saved files and documents are encrypted, and access is logged. See security.
- Subprocessors. We use the subprocessors listed, under contracts with equivalent obligations, and tell you of changes before they apply.
- Assistance. We help you answer data subject requests and meet your obligations on security, breach notification and impact assessments, and tell you of a personal data breach without undue delay.
- End of service. You can export your data at any time. When you delete a workspace, its data is deleted, and disappears from backups within 14 days.
- Audits. We make available the information needed to show compliance with this agreement, on request to support@eudrplot.com.
For a signed copy, contact support@eudrplot.com.