Data processing agreement
Read and conclude the data processing agreement with the operator of BizCortex and see the subprocessors.
The data processing agreement (DPA, Art. 28 GDPR) is the contract between your company and the operator of BizCortex. Open "Data protection" and then "Data processing agreement". The page shows the current version, the date it was published, the annexes, the list of subprocessors and the history of acceptances.
When a new version is published, Owners see a banner "New DPA: accept now" in the header until it is accepted.
Who can use this
- Owner, Admin and Compliance can view
- Only an Owner can conclude it
Steps
1. Read the agreement
Read the text of the current version and the annexes.
2. Check the subprocessors
The table "Subprocessors" (annex 2) lists every company that processes personal data on behalf of the operator, with purpose and data, place of processing and safeguards (EU/EEA, Adequacy decision, Data Privacy Framework or Standard contractual clauses). Services that are not subprocessors are listed separately.
3. Conclude
As an Owner, tick "I am authorised to represent the company and conclude the data processing agreement in this version." and click "Conclude DPA".
Good to know
- The acceptance is stored with the version, the date, the person and the IP address, and written to the audit log.
- API keys and operators who act as your company can never accept the agreement.
- If no version has been published yet, the page shows "No DPA published yet".