Data processing agreement

This agreement forms part of the terms of service. It applies when DB Events BV (“processor”) processes personal data on behalf of the customer (“controller”) through Ploffo, within the meaning of Article 28 GDPR.

• Data subjects: the customer’s staff, approvers at the customer’s clients, and people who appear in the content.
• Data: names, email addresses, roles, dated approvals, and post content (text, images, video).
• Purpose: scheduling, approving and publishing posts, and keeping proof of publication.
• Duration: for the term of the agreement, and afterwards until the data is deleted.

• Processes only on the customer’s documented instructions; the agreement and the settings in Ploffo count as instructions.
• Ensures that anyone processing the data is bound by confidentiality.
• Takes appropriate technical and organisational measures.
• Assists the customer with data subject requests and data protection impact assessments.
• Reports a personal data breach without undue delay, and within 48 hours of discovery at the latest.
• Deletes or returns the data at the end of the agreement, as the customer chooses, within the periods set out in the privacy policy.
• Provides the information needed to demonstrate compliance and cooperates with audits.

The customer gives general authorisation for the sub-processors listed in the privacy policy. We announce new sub-processors at least 30 days in advance; the customer may object on reasonable grounds.

Data is only processed outside the European Economic Area with appropriate safeguards, such as the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.

Where this agreement conflicts with the terms of service, this agreement prevails on data protection. Belgian law applies.

Need a signed copy? Email marketing@defyandbrandevents.be.