Privacy & GDPR
Do I need a data processing agreement?
In short
No separate agreement is needed: data processing under Art. 28 GDPR is governed directly in § 9a of our terms and becomes binding upon contract conclusion.
If you use XICTRAQ to process data of your website visitors, you are the controller and we are the processor under Art. 28 GDPR. The required arrangements are contained directly in § 9a of our terms — no separate written DPA is necessary.
They cover, among other things, the subject and duration of processing, the technical and organizational measures and the handling of sub-processors. For any questions you can reach us via the contact form.
Still have questions?
Our team from Lower Saxony is happy to help.