Draft, not yet legally reviewed

Data processing agreement (AV-Vertrag)

Subject matter and duration

[The parties, subject matter and duration under Article 28 GDPR will be specified here. Intended processor: fogu UG (haftungsbeschränkt), Im Großenbruch 34, 66583 Spiesen-Elversberg, Deutschland; represented by managing director Christian Kunkel; datenschutz@verwalino.de. The respective customer will be added as controller.]

Nature and purpose

[The processing operations and purposes of hosted property management will be described here.]

Types of data

[The types of data actually processed will be listed here.]

Categories of data subjects

[The categories of people affected by the agreed service will be listed here.]

Processor obligations

[Instructions, confidentiality, assistance and reporting arrangements will be described here following legal review.]

Technical and organisational measures (annex)

[An annex documenting the technical and organisational measures actually implemented will be added here.]

Sub-processors

[The sub-processors, locations and agreed change procedure will be specified here.]

Controller rights

[The inspection, information and instruction rights of each customer acting as controller will be described here.]

Erasure

[Data return and erasure after contract termination, including agreed periods, will be described here.]