Skip to content
Up4it Docs

Data Processing Agreement

A data processing agreement is a legally binding contract that states the rights and obligations of Up4it (acting as a data processor) and you (acting as a data controller) concerning the protection of personal data. It completes Up4it’s Terms and Conditions and applies to personal data processing activities subject to GDPR.

In accordance with GDPR Help 28, Section 3, our data processing agreement includes assurances that:

  • Up4it agrees to process personal data only on written instructions of your company.
  • Everyone who comes into contact with data at Up4it is sworn to confidentiality.
  • Up4it uses appropriate technical and organizational measures to protect the security of the data.
  • Up4it will not subcontract to another processor unless instructed to do so in writing by your company, in which case another DPA will need to be signed with the sub-processor (pursuant to Sections 2 and 4 of Help 28).
  • Up4it will help your company uphold its obligations under the GDPR, particularly concerning data subjects’ rights.
  • Up4it will help your company maintain GDPR compliance with regard to Help 32 (security of processing) and Help 36 (consulting with the data protection authority before undertaking high-risk processing).