Data Processing Agreement (DPA)

This Data Processing Agreement (the "Agreement") is entered into on Date (the "Effective Date").

1. Parties

Controller

• Full legal name: Company name
• Registered address: Address
• CVR/ID No.: CVR

Processor

• Full legal name: Company name
• Registered address: Address
• CVR/ID No.: CVR

The Controller and the Processor are each a "Party" and together the "Parties".

2. Purpose and Scope

2.1 Processing Relationship

This Agreement governs the Processor’s processing of Personal Data on behalf of the Controller.

2.2 Main Agreement

This Agreement forms part of and supplements the underlying service agreement between the Parties (the "Main Agreement").

2.3 Conflict

In the event of conflict between this Agreement and the Main Agreement, this Agreement prevails regarding data protection matters.

3. Definitions

For the purposes of this Agreement:

• "Personal Data" means any information relating to an identified or identifiable natural person.
• "Processing" means any operation performed on Personal Data.
• "Data Subject" means the individual to whom Personal Data relates.
• "Applicable Data Protection Law" means Regulation (EU) 2016/679 (GDPR) and any applicable national data protection legislation.

4. Nature and Purpose of Processing

4.1 Purpose

The Processor shall process Personal Data solely for the purpose of performing services under the Main Agreement.

4.2 Data Subjects and Data Types