Rechtliches
Auftragsverarbeitungsvertrag
Entwurf. Dieser Text wurde noch nicht rechtlich geprüft und wird vor dem Start finalisiert. Die verbindliche deutsche Fassung folgt nach der Prüfung.
Data processing agreement
Where SustainSide processes personal data on your behalf, it does so as a processor under Art. 28 GDPR. Our data processing agreement covers subject matter, duration, types of data, technical and organisational measures, subprocessors, assistance with data subject requests, breach notification within 48 hours and deletion at the end of the contract.
Technical and organisational measures
EU hosting, encryption in transit and at rest (including encrypted backups), strict tenant isolation, role-based access, multi-factor authentication for staff, append-only audit logs, regular security testing. Details: our security documentation, available on request.
How to sign
Email privacy@sustainside.com. We send the agreement for electronic signature.
Stand: 24.09.2026