Do you have a data processing agreement?
Updated
Privacy and data, 7 articles
Yes. The data processing agreement is public, and you agree to it when you create your account. You do not have to request or sign anything separately.
How it is concluded
When you sign up, one box covers the terms and conditions, the processing agreement and the privacy statement. Ticking it concludes the agreement. priceq records which version you accepted, a fingerprint of the exact text you were shown, the time, your IP address and your browser.
If you want your own signed copy, you can ask for one through the contact address on the legal page.
What is in it
It adopts the standard contractual clauses of the European Commission (Implementing Decision (EU) 2021/915) in full, instead of a text of our own. Your legal department will recognise them. The annexes describe what priceq actually does:
- Annex I names the parties. Your company name and billing address come from your account.
- Annex II describes the processing, including how long data is kept.
- Annex III describes the security measures, such as the separation between customers.
- Annex IV lists the sub-processors.
Some choices in the agreement are worth knowing. A personal data breach is reported to you within 24 hours of our becoming aware of it. You may audit us, on site at most once a year. Changes to the sub-processors are announced at least 30 days ahead, and you may object. When the agreement ends, we delete the personal data, and you can take a full export yourself at any time.
The Dutch text is the binding one. The English version is a translation for convenience.
Your company details
Annex I uses the company name and address from your account. An Admin fills them in under Settings, Client, in the Company details block. The same details go on your invoice.
Questions
Mail [email protected]. See also Who are your sub-processors? and Export your data.
Cannot find it? Mail us. We answer ourselves, then write the article. [email protected]