Services
Industries
Pricing
Free Resources
Resources

Free legal resources to help you start or run your business in Germany.
Company
Company

LEXR is specialized in delivering customer-focused legal services for businesses.
- About us
- Careers
- Team
Contact
+49 30 46 777 29 80 Our operating hours are 9:00-17:00 Mon-Fri

Please select your location and language below.

Data Processing Agreement

The agreement you need when you share personal data with third parties

Data processing agreement (DPA)

If third parties process personal data on your behalf, the EU-GDPR determines that you need to have an agreement in place regulating these sharing operations. This can occur when you use service providers during your operations (e.g. cloud server providers, CRM management software), as well as when you transfer personal data to third countries from the EU. If you are in the SaaS business, you also should offer (DPA) to your customers. With our help, you will have all the tools you need to make sure your personal data sharing contract arrangements are put in place in a seamless and quick way.

Benefits of a LEXR DPA

Meet compliance requirements for sharing personal data

Gain peace of mind, streamline contract drafting and increase customer and partner confidence with our agreements adapted to your objectives and interests.

Get access to an easy-to-use contract generator that you can start using right now

LEXR offers you a DPA generator for free. Through it, you can draft your own DPA with the assurance that it will meet regulatory requirements.

Get tailored support from a data protection legal expert for specific needs

In case you need more in-depth support, our team of data protection experts can also assist you in checking your existing DPAs for compliance or tailoring a new one to your needs.

Book a free call

DPA – what we offer

We offer a free generator through which you can draft your own data processing agreement. It includes:

Easy-to-use generator, designed for hassle-free compliance with the EU-GDPR;

The standards of the European Commission refined by our LEXR expertise;

Options for personalisation, ensuring that the DPA is tailored to your needs.

Generate your DPA

If you need additional assistance in drafting or reviewing your agreements, contact us so that we can provide you with the support you require. This includes, among other topics:

Review of the documents you generated to ensure they are in line with your interests and goals;

Help you negotiating DPAs with your clients and partners;

Create a personalised DPA for your special situation.

Book a free call

Other data protection services

FAQ

When do I need to have a DPA?

A DPA is needed whenever you transfer personal data to a service provider that acts under your instructions for the specific purposes you have defined – what is called a processor. The same need appears if your company acts as a service provider for another company.
What does a DPA need to include?

Under the EU-GDPR, there are certain topics that need to be covered. These are defined in Art. 28 EU-GDPR and include the purpose, duration and nature of the processing, the need for the processor’s employee and staff to be under a duty of confidentiality and the processor’s obligation to only act under the instructions of the controller, assist the controller in complying with data subjects’ rights request, the security of the personal data and, in general, with the obligations enshrined in the EU-GDPR.

Under Swiss law, however, the controller needs to ensure that the processor can guarantee the security and integrity of the personal data that is transferred to it. Furthermore, the agreement shall define that the processor can only use a sub-processor with the previous authorisation of the controller and that controllers need to be informed in case of data breaches.
Can my service provider transfer the personal data to another service providers?

It can, but it needs to obtain the authorisation from the controller, as defined in the DPA. This can be done on a case-by-case basis, where the processor requests the authorisation from the controller every time they want to engage with a new sub-processor. It can also be done with a general authorisation included in the DPA, where the controller allows the processor to engage with new sub-processors for the future.
Are there other agreements related to data protection that I need to pay attention to?

In certain cases, personal data is not transferred to a processor (meaning a service provider that acts under the instructions of the controller), but to another company that, jointly with yours, also determines the purposes and means of the processing. In these cases and under the EU-GDPR, this relationship also needs to be governed by a contract, where the joint controllers determine their respective responsibilities and, in particular, how they will comply with data subjects’ rights and how they will provide the appropriate privacy notices to them.

Book a free call

(1) Select a timeslot
(2) Enter your details and choose a contact method
(3) Get a calendar invite with all details and we’ll be in touch

Data Processing Agreement

Data processing agreement (DPA)

Benefits of a LEXR DPA

Meet compliance requirements for sharing personal data

Get access to an easy-to-use contract generator that you can start using right now

Get tailored support from a data protection legal expert for specific needs

DPA – what we offer

We offer a free generator through which you can draft your own data processing agreement. It includes:

If you need additional assistance in drafting or reviewing your agreements, contact us so that we can provide you with the support you require. This includes, among other topics:

Other data protection services

EU Representative Service

Data protection expert in a monthly subscription

FAQ

When do I need to have a DPA?

What does a DPA need to include?

Can my service provider transfer the personal data to another service providers?

Are there other agreements related to data protection that I need to pay attention to?

Book a free call