When is there an official order or commission for data processing?
As soon as you or your customer stores personal data on a server with us, it is defined as an order or commission for data processing according to Article 28 of the GDPR (General Data Protection Regulation, a European Union regulation). If this applies to you, you are required by law to complete a Data Processing Agreement (DPA).
What are personal data?
The term "personal data" is defined in Article 4 (1) GDPR as "all information relating to an identified or identifiable natural person (data subject)". Examples of personal data are name of a person, address, telephone number, e-mail address, gender, account number, etc. But also the IP address is one of the personal data.
Where can I find the Data Processing Agreement (DPA)?
Please log in with your customer account. Under the menu item "Edit account details" you will see "Order data processing Contract". Please note that you will see the contract in the language set in the customer panel. You can change the language at any time directly in the customer panel.
How should I fill out the Data Processing Agreement (DPA)?
At the top of the form, you will first see the information about yourself/your company that we have stored. You will also see your existing contracts here.
In the section called "Types of data", you can add additional categories of data for different types of personal data that you have stored with us.
In the section called "Affected People", you have a similar choice.
If you need to add anything to "Types of data" or "Affected People" after you finish the DPA, you can simply create a new agreement and delete the old one.
After this, you will see a new section with the title "Data Processing Agreement in Accordance with Article 28 of the General Data Protection Regulation (GDPR)". This is the actual DPA itself and available as preview.
Once you have consented to the DPA, your digital DPA will be automatically created. The DPA will be made up of your personal data, the content of the DPA itself, Appendix with the "Types of data" and "Affected People", and Appendix with the "Technical and organizsational measures in accordance to Art. 32 GDPR and Amendments".
The contract will be automaticllay signed by us. All you have to do is print it out, sign it, and put it somewhere safe with any other data protection documents you have.
If you have any questions, please contact our support.
Do I have to sign the printed contract and send it to OwnCube?
No, that's not necessary. At the same time we create a copy of the contract, which we place with us. We do not need your signature.
