Data processing
This mock-up contains draft texts. The legal provider, final agreements and contact details must be confirmed before public launch.
Responsibilities
Determine whether a processing agreement is required for each data flow. Identify controller, processor, purposes, duration, data subjects and personal data categories. Hosting location alone does not determine these roles.
Detailed agreements
Specify instructions, confidentiality, measures, subprocessors and any international transfers. Include assistance with rights, breach notification, audits, return and deletion.
Research stewardship
Agree backups, recovery, group separation, export and retention separately. This draft provides an agreement structure and is not a signed processing agreement.
Sources: Autoriteit Persoonsgegevens · cookies · EU 2016/679