Data Processing Agreement
The Loomduct DPA applies automatically. You do not need to sign anything.
The Data Processing Agreement (DPA) is part of the terms of service. It applies automatically when you use Loomduct, so there is nothing to sign.
It covers:
- what visitor data Loomduct processes for you, and that IP addresses are used only in memory,
- that data and backups stay in the EU,
- notice of a data breach within 48 hours,
- notice of new subprocessors 7 days ahead,
- audits once a year, with 30 days' notice.
See also the list of subprocessors and the privacy policy.