Data Processing Agreement

Last Updated: November 16, 2025

1. Introduction

This Data Processing Agreement ("DPA") supplements the Terms of Service between MyWebdav Technologies (the "Processor") and the Customer (the "Controller") regarding the processing of personal data.

2. Definitions

• Personal Data: Any information relating to an identified or identifiable natural person
• Processing: Any operation performed on personal data
• Data Subject: The individual whose personal data is processed

3. Scope and Applicability

This DPA applies to all processing of personal data by the Processor on behalf of the Controller.

4. Processing Purposes

The Processor shall process personal data solely for the purpose of providing the Service as described in the Terms of Service.

5. Data Protection Obligations

5.1 Lawfulness

Processing shall comply with GDPR and other applicable data protection laws.

5.2 Security Measures

The Processor shall implement appropriate technical and organizational measures to ensure data security.

5.3 Confidentiality

All personnel with access to personal data shall maintain confidentiality.

6. Data Subject Rights

The Processor shall assist the Controller in fulfilling data subject rights requests.

7. Subprocessing

The Processor may engage subprocessors with prior notice to the Controller.

8. Data Breach Notification

The Processor shall notify the Controller of any personal data breaches without undue delay.

9. Data Protection Impact Assessment

The Processor shall assist with DPIAs when required.

10. International Data Transfers

Data transfers outside the EU shall comply with GDPR Chapter V.

11. Audit Rights

The Controller may audit the Processor's compliance, subject to confidentiality obligations.

12. Termination

Upon termination, the Processor shall delete or return all personal data.

13. Governing Law

This DPA is governed by the laws of the Netherlands.