Data processing agreement (dpa) — found from the homepage — Trackado

Cited by

Facts read from this source

• Trackado entity Report an error

  “Trackado AB Köpsvängen 10 168 67 Bromma Stockholms Län Sweden”

• DPA applicable from Report an error

  “This DPA applies to Agreements from January 15, 2025.”

• DPA governing law Report an error

  “This DPA is subject to the laws of Sweden.”

• GDPR tom reference Report an error

  “Supplier shall implement technical and organizational measures to ensure the adequate protection of Customer’s Data, which measures shall fulfil the requirements of the GDPR and specifically its Article 32.”

• Audit rights Report an error

  “The Supplier shall provide the Controller and its independent auditors with necessary access to information and premises to verify compliance with the DPA, limited to once a year, unless a material breach is reasonably suspected.”

• Audit costs Report an error

  “Each party bears its own audit costs, with the Controller covering third-party costs. If no material breach is found, the Controller covers all audit costs.”

• Data residency Report an error

  “Customer personal data is stored and processed within the EU/EEA (Netherlands) using Boldsign’s EU data residency.”

• Microsoft Report an error

  “Microsoft Ireland Operations Ltd, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland Hosting / Cloud services EU”

• Subprocessor objection window Report an error

  “the Controller has a right to object to the new Sub-Processor in writing within ten (10) days from receipt of the Supplier’s notice.”

• Subprocessor objection termination Report an error

  “If the Parties cannot agree on any solution within a reasonable period of time, which shall not exceed thirty (30) days, the Controller may terminate the agreement by notifying the Supplier in writing.”

• Scc international transfers Report an error

  “In the event that the Supplier transfers Personal Data to a country outside the EU/EEA without an adequacy decision, the Supplier shall execute a supplementary agreement incorporating the current Standard Contractual Clauses (SCC) from the European Commission, provided the SCC remains a valid transfer mechanism.”

• Breach notification Report an error

  “Supplier shall notify Customer, without undue delay, if Supplier becomes aware of breaches of the protection of personal data within Supplier’s scope of responsibility.”

• Data subject support Report an error

  “Supplier shall support Customer in fulfilling data subjects’ requests and claims, as detailed in chapter III of the GDPR and in fulfilling the obligations enumerated in Articles 33 to 36 of the GDPR. Supplier may charge additional fees for such support.”

• DPA support fees Report an error

  “Supplier shall correct or erase Data if so instructed by Customer and where covered by the scope of the instructions permissible. Supplier may charge additional fees for such support.”

• DPA signed copy Report an error

  “Upon the Controller’s written request, the Processor will provide the Controller with a signed version of this DPA.”

• Subprocessor list on request Report an error

  “During the term of the Agreement, the Supplier shall maintain an updated list of all Sub-Processors who process Personal Data in connection with the Agreement and shall send a copy of the list to the Controller upon the Controller’s request.”

• Data processing scope Report an error

  “Contact Data: Data that helps to identify and contact a data subject (e.g. name, email, phone number, company address). Providing a contract management Software-as-a-Service solution.”

• Signature service Report an error

  “E-Signing services”

• Two factor authentication Report an error

  “Text messaging for two-factor-authentication”

• Subprocessor signrequest deprecated Report an error

  “SignRequest B.V., Singel 542, 1017AZ Amsterdam, The Netherlands (being deprecated)”

• Subprocessor request forwarding Report an error

  “If the Supplier receives a legally binding request from a public authority via its Sub-processors for disclosure of Personal Data under the SCCs, it shall forward such requests to the Customer.”

5 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Data Protection Officer AI extraction & review transparency
• The Data Protection Officer Integrations, signature & exit
• The Data Protection Officer European sovereignty
• The General Counsel AI extraction & review transparency
• The General Counsel Integrations, signature & exit
• The General Counsel European sovereignty
• The IT Integrator AI extraction & review transparency
• The IT Integrator Integrations, signature & exit
• The IT Integrator European sovereignty
• The Procurement Analyst AI extraction & review transparency
• The Procurement Analyst Integrations, signature & exit
• The Procurement Analyst European sovereignty
• The Sales Ops Owner AI extraction & review transparency
• The Sales Ops Owner Integrations, signature & exit
• The Sales Ops Owner European sovereignty
• The Skeptic AI extraction & review transparency
• The Skeptic Integrations, signature & exit
• The Skeptic European sovereignty