Data Processing Agreement (GDPR)

What is it?

With this data processing agreement, you can determine how the data processor uses the personal data that the Controller collects. For example, it’s possible to agree on:

The specific purposes for which personal data are used;
The security measures taken by processor;
The confidentiality of the personal data.

Why do I need it?

Almost every company collects personal data of visitors, customers or users. Data can already be personal data if you can trace it back to the person. Not just someone’s name, but also their e-mail address, phone number and IP-address are personal data.

When other parties process this data (for example: storage, sorting and using) you are legally obliged to have a processing agreement. For example think of a payroll administration. They process the personal data you have collected.

Start drafting now

Word & PDF download
14-day edit period
Ready in 10 minutes
Built for entrepreneurs
Legally binding

Make contract

€99,- ex VAT. Or subscribe and get this Data Processing Agreement (GDPR) and and 100+ other contracts for free.

Why choose Legalflow?

We make legal services accessible. No expensive lawyers or complicated jargon. Just smart software that helps you create professional contracts in minutes.

Smart Tech

Our smart wizard guides you through simple questions. Based on your answers, we generate a fully customized document that fits your specific situation.

How it works

Affordable

Traditional legal costs are unpredictable. With Legalflow, you pay a low fixed price or a monthly subscription. Save up to 90% compared to a law firm.

View pricing

By experts

Stop worrying about the uncertainty of legal compliance and document validity.

Quality Promise

Done in 10 minutes

Why wait days for a draft?

Select the contract you need, answer the English or Dutch questions, and receive a Word and PDF document instantly.

You can edit the Word document afterwards to add any specific details you want.

Find your contract

Legally Waterproof

We have simplified the process without compromising on professional legal depth.

All our templates are handcrafted by experienced Dutch lawyers. We automate the complexity, so you don't have to worry about the details.

We guarantee that our contracts comply with current regulations (like WAB and BW).

Questions? Contact us

Important tips

If you are a data controller
When your company determines why and to what extent personal data is collected (purpose and means), you are responsible for the way the data processor processes the personal data. Even when the data processor is a subsidiary company, you are legally obliged to have a data processing agreement with the subsidiary company.

The data processor may in principle not process data outside of the EU
Data can only be processed within countries outside the EU that provide an adequate level of protection for the processing of personal data in accordance with the GDPR. For example, when an American company is listed on the EU-US Privacy Shield List.

The most important GDPR changes
You can find more information and tips on our blog (Dutch).

Note!

This is a convenience translation from the original Dutch privacy policy. Although we try to assure that the policy is without errors, we do not guarantee this in any way. Also, translated Dutch law concepts may mean something else in other jurisdictions. Note that this agreement is to be used in a Dutch context only.