Legal
Data processing agreement
Draft. This text has not yet been reviewed by legal counsel and will be finalised before launch.
Data processing agreement
Where SustainSide processes personal data on your behalf, it does so as a processor under Art. 28 GDPR. Our data processing agreement covers subject matter, duration, types of data, technical and organisational measures, subprocessors, assistance with data subject requests, breach notification within 48 hours and deletion at the end of the contract.
Technical and organisational measures
EU hosting, encryption in transit and at rest (including encrypted backups), strict tenant isolation, role-based access, multi-factor authentication for staff, append-only audit logs, regular security testing. Details: our security documentation, available on request.
How to sign
Email privacy@sustainside.com. We send the agreement for electronic signature.
Last updated: 24.09.2026