Skip to content
EU hosting in Germany GDPR-native ISO 27001 processes German-language support
Status Resources About
Knowledgeworker Liveby chemmedia
DE EN
Log in Start for free
Legal

Data processing agreement (DPA)

Agreement on processing under Art. 28 GDPR between the customer (controller) and chemmedia AG (processor).

Version: 2026-07

Note: this is a realistic example template and has not yet been legally reviewed. The German version is legally binding. Have it approved by legal counsel before production use; items in [square brackets] must be completed before publication.

1. Subject, nature and purpose

Processing of personal data by the processor to provide the platform services (creation, voicing, distribution and analysis of audio/video content). Duration, nature and purpose follow from the main contract.

2. Data subjects and categories

Data subjects: the customer's users and listeners. Categories: master and contact data, usage and access data, content provided by the customer.

3. Instructions, confidentiality, TOMs (Art. 32)

Processing takes place only on the controller's documented instructions, by persons bound to confidentiality. Appropriate technical and organisational measures apply: encryption in transit and at rest, strict tenant isolation, role-based access control, logging, backup/recovery, EU data centres (Annex 1).

4. Sub-processors, support, deletion

Sub-processors are engaged under Art. 28(4) GDPR (Annex 2; changes announced with a right to object). The processor supports the controller with data-subject rights, breach notifications and DPIAs; after the contract, data is deleted or returned at the controller's choice, subject to audits.