Data Processing Agreement

[Placeholder: controller and processor, and relation to the Terms of Service.]

[Placeholder: terms as defined in the GDPR and the Terms of Service.]

[Placeholder: what is processed and for how long.]

[Placeholder: processing operations carried out to provide the service.]

[Placeholder: types of personal data and categories of data subjects.]

[Placeholder: documented instructions, confidentiality and assistance to the controller.]

[Placeholder: technical and organisational measures.]

[Placeholder: authorised sub-processors and how changes are notified.]

[Placeholder: transfers outside the EU/EEA and safeguards used.]

[Placeholder: notification timelines and content.]

[Placeholder: how the processor assists with data subject rights.]

[Placeholder: audit and inspection rights.]

[Placeholder: what happens to data at the end of the agreement.]

[Placeholder: liability and governing law, by reference to the Terms of Service.]