{"id":45227,"date":"2024-08-05T13:24:26","date_gmt":"2024-08-05T13:24:26","guid":{"rendered":"https:\/\/www.templafy.com\/?page_id=45227"},"modified":"2026-03-30T06:44:53","modified_gmt":"2026-03-30T06:44:53","slug":"data-processing-agreement","status":"publish","type":"page","link":"https:\/\/www.templafy.com\/home\/platform\/security\/data-processing-agreement\/","title":{"rendered":"Data processing agreement"},"content":{"rendered":"\n
\n
\n
\n

Templafy DPA<\/h1>\n\n\n\n

Effective Date: 27 March 2026<\/p>\n<\/div>\n<\/div>\n<\/section>\n\n\n\n

\n
\n
\n

Data Processing Agreement<\/h2>\n<\/div>\n\n\n\n
\n

BETWEEN:<\/p>\n\n\n\n

Templafy ApS
CVR No.: 25662946
Wilders Plads 15A
1403 Copenhagen K
Denmark
Or other Templafy entity<\/strong><\/a> that has entered an Agreement with Customer
(\u201cTemplafy\u201d)<\/p>\n\n\n\n

AND<\/p>\n\n\n\n

Each individual Templafy Customer that Templafy processes data for and that has not otherwise entered into a valid data processor agreement with Templafy (the \u201cCustomer\u201d)<\/p>\n<\/div>\n<\/div>\n<\/section>\n\n\n\n

\n
\n
\n

1. INTRODUCTION<\/h2>\n<\/div>\n\n\n\n
\n

1.1            This Data Processing Agreement (\u201cDPA\u201d) specifies the Parties\u2019 data protection obligations which arise from Templafy\u2019s processing of Personal Data on behalf of Customer under the service order, service agreement or other agreement between the Parties (\u201cthe Agreement\u201d). All capitalized terms not defined in this DPA shall have the meaning set forth in the Agreement.<\/p>\n\n\n\n

1.2            The DPA is adopted as an appendix to the Agreement. In the event that any provision of this DPA is inconsistent with any term of the Agreement, including the Templafy Privacy Policy incorporated therein and available at https:\/\/www.templafy.com\/privacy\/<\/a> and the Agreement, the DPA will prevail. The Agreement, including the Templafy Privacy Policy, shall supplement this DPA to the extent not inconsistent or in conflict with this DPA. If the Standard Contractual Clauses conflict with any provision of the Agreement or the DPA, the Standard Contractual Clauses shall prevail to the extent of such conflict.<\/p>\n\n\n\n

1.3            If Applicable Data Protection Law is amended, replaced or repealed, the parties shall, where necessary, negotiate in good faith a solution to enable the processing of Personal Data to be conducted in compliance with Applicable Data Protection Law.<\/p>\n<\/div>\n<\/div>\n<\/section>\n\n\n\n

\n
\n
\n

2. PURPOSE, SCOPE AND RESPONSIBILITIES<\/h2>\n<\/div>\n\n\n\n
\n

2.1            Templafy shall only process Personal Data in accordance with the terms of this DPA.<\/p>\n\n\n\n

2.2            The parties agree Customer is the Data Controller of Customer Personal Data. Templafy is the Data Processor of Customer Personal Data, except where Templafy acts as a Data Controller as described in Templafy\u2019s Privacy Policies at https:\/\/www.templafy.com\/privacy\/<\/a>.<\/p>\n\n\n\n

2.3            Templafy shall process Customer Personal Data for the limited purpose of performing the obligations set out under the Agreement and only in accordance with Customer\u2019s lawful instructions or otherwise necessary to comply with Applicable Data Protection Law. Data may, for that purpose, be processed by any of Templafy\u2019s entities in accordance with Section 7.<\/p>\n\n\n\n

2.4            Customer shall ensure that its instructions to Templafy comply with all laws and regulations applicable to Customer Personal Data, and that the processing of Customer Personal Data following Customer\u2019s instructions will not cause Templafy to be in breach of Applicable Data Protection Law. Customer is solely responsible for the accuracy, quality and legality of Customer Personal Data provided to Templafy in accordance with this DPA.<\/p>\n\n\n\n

2.5            Personal Data processed by Templafy shall include such actions as may be specified in the Agreement. Further data processing outside the scope set out in this Section 2 shall require mutual written agreement of the parties.<\/p>\n\n\n\n

2.6            If Templafy becomes aware that any instruction given by Customer breaches Applicable Data Protection Law, Templafy shall immediately inform Customer of this, giving details of the breach or potential breach.<\/p>\n\n\n\n

2.7           The term of this DPA shall continue until the later of the following: the termination of the Agreement or the date at which Templafy ceases to process Personal Data for Customer.<\/p>\n\n\n\n

2.8            In no event will the data processed by Templafy include financial data or Sensitive Data.<\/p>\n\n\n\n

2.9            The types and categories of Customer Personal Data processed by Templafy, and the purpose of such processing is set out in Exhibit 1.<\/p>\n<\/div>\n<\/div>\n<\/section>\n\n\n\n

\n
\n
\n

3. OBLIGATIONS OF TEMPLAFY AS DATA PROCESSOR<\/h2>\n<\/div>\n\n\n\n
\n

3.1            Templafy warrants that it will:<\/p>\n\n\n\n

i) comply with Applicable Data Protection Law relevant to Templafy\u2019s obligations under the Agreement;<\/p>\n\n\n\n

ii) implement appropriate technical and organizational measures in such a manner that processing will meet the requirements of Applicable Data Protection Law and ensure the protection of the rights of the data subjects; and<\/p>\n\n\n\n

iii) make available to Customer all information reasonably necessary to demonstrate compliance with the obligations in this DPA; and reasonably cooperate with any audits performed by Customer or its independent auditor, at Customer\u2019s own expense and no more than once a year, of facilities under the control of Templafy, in accordance with Section 10.2 of the Agreement.<\/p>\n<\/div>\n<\/div>\n<\/section>\n\n\n\n

\n
\n
\n

4.  TECHNICAL AND ORGANIZATIONAL SECURITY MEASURES<\/h2>\n<\/div>\n\n\n\n
\n

\u200b4.1            Templafy will implement and maintain throughout the term of the DPA and will procure its Sub-processors to implement and maintain through the term of the DPA, the appropriate technical and organizational security measures to protect Personal Data against accidental or unlawful destruction, loss, damage or alteration and against unauthorized disclosure, abuse or other processing in violation of the requirements of Applicable Data Protection Law. <\/p>\n\n\n\n

\u200b4.2            Templafy will ensure that it and its Sub-processors will at all times comply with the minimum data security requirements set out in Exhibit 2, which may, from time to time, be updated, provided that such updates and modifications do not degrade or diminish the overall security of the Services.<\/p>\n\n\n\n

\u200b4.3            Customer has evaluated the security measures implemented by Templafy and agrees that they provide an appropriate level of protection for Customer Personal Data.<\/p>\n<\/div>\n<\/div>\n<\/section>\n\n\n\n

\n
\n
\n

5.  PERSONNEL<\/h2>\n<\/div>\n\n\n\n
\n

\u200b5.1            Templafy shall ensure that any personnel required to access Customer Personal Data have committed themselves to the obligation of confidentiality set out in the Agreement or are under a statutory obligation of confidentiality.<\/p>\n\n\n\n

\u200b5.2            Templafy shall ensure that its personnel required to access Customer Personal Data are informed of the confidential nature of Customer Personal Data and the security procedures applicable to the processing of or access to Customer Personal Data.<\/p>\n\n\n\n

\u200b5.3            Templafy\u2019s personnel\u2019s confidentiality obligations will survive the termination of the personnel engagement and the term of this DPA. <\/p>\n<\/div>\n<\/div>\n<\/section>\n\n\n\n

\n
\n
\n

6.  ASSISTANCE TO THE CUSTOMER AS DATA CONTROLLER<\/h2>\n<\/div>\n\n\n\n
\n

\u200b6.1            Templafy shall provide reasonable and timely assistance, by appropriate technical and organizational measures to Customer to enable them to respond to: (i) any request from a data subject to exercise any of its rights under Applicable Data Protection Law (including its rights of access, correction, objection, erasure and data portability, as applicable); and (ii) any other correspondence, enquiry or complaint received from a data subject, Regulator or other third party in connection with the processing of the Personal Data. In the event that any such request, correspondence, enquiry or complaint is made directly to Templafy, Templafy shall promptly inform Customer providing full details of the same, unless prohibited by the applicable law.<\/p>\n\n\n\n

\u200b6.2            Templafy shall reasonably assist Customer with its obligation to conduct any data protection impact assessment required by Applicable Data Protection Law.<\/p>\n<\/div>\n<\/div>\n<\/section>\n\n\n\n

\n
\n
\n

7.  SUB-PROCESSORS<\/h2>\n<\/div>\n\n\n\n
\n

7.1            The Sub-processors, approved by Customer, are listed at https:\/\/www.templafy.com\/sub-processors\/<\/a>. Customer hereby gives a general authorization for the engagement of additional Sub-processors for the purpose of performing its obligations under the Agreement, provided Templafy shall:<\/p>\n\n\n\n

\u2022 maintain an up-to-date list of its Sub-processors at https:\/\/www.templafy.com\/privacy\/<\/a> (or any future website used by Templafy);<\/p>\n\n\n\n

\u2022 <\/strong>provide at least 30 days prior notice (except to the extent a 30 days\u2019 notice is not possible due to an emergency concerning Service availability or security) to Customer of any additional or replacement Sub-processors via Templafy\u2019s usual e-mail notification process;<\/p>\n\n\n\n

\u2022 execute a written agreement that obligates the Sub-processor to (i) protect Customer Personal Data to the same extent required of Templafy by the Agreement; and (ii) comply with Applicable Data Protection Law. <\/p>\n\n\n\n

\u200b7.2            If Customer objects to such new Sub-processor on reasonable grounds within 30 days of receiving notice, the parties shall negotiate in good faith to find an alternative solution. If such alternative solution cannot be found and Templafy decides to proceed with such Sub-processor, Customer may terminate the Agreement with 30 days prior written notice. Neither of the Parties shall be considered in breach of contract in the event of such termination. Customer acknowledges that Templafy provides a standardized service to all customers which does not allow using different Sub-processors for different customers and, therefore, that the inability to use a particular new or replacement Sub-processor for the Services to the Customer may result in delay in performing the Services, inability to perform the Services or increased fees. Templafy will notify Customer in writing of any change to Services or fees that would result from Templafy\u2019s inability to use a new or replacement Sub-processor to which Customer has reasonably objected. If Customer does not object to a new Sub-processor\u2019s engagement within 30 days, that new Sub-processor shall be deemed accepted. <\/p>\n\n\n\n

\u200b7.3            Templafy shall be liable for the acts or omissions of its Sub-processors to the same extent that Templafy would be liable if performing the Services of each Sub-processor directly under the terms of this DPA.<\/p>\n<\/div>\n<\/div>\n<\/section>\n\n\n\n

\n
\n
\n

8.  TRANSFER OF DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS<\/h2>\n<\/div>\n\n\n\n
\n

8.1            Customer acknowledges and agrees that Templafy may transfer and process Customer Personal Data to its authorized Sub-processors in third countries for the provision of the Services. Any transfer of Personal Data to third countries or international organizations by Templafy shall always take place in compliance with EU Data Protection Law, UK Data Protection Law and this DPA.<\/p>\n\n\n\n

\u200b8.2            Any transfer of Customer Personal Data made from EEA, Switzerland or United Kingdom to a Restricted Country will rely on valid data transfer mechanism, including where applicable, an adequacy decision under Article 45 GDPR or under equivalent provisions of UK Data Protection Law or the Swiss DPA (which may include the EU-US Data Privacy Framework and its UK and Swiss extensions) or, alternatively, the Standard Contractual Clauses (together with the UK Addendum, where UK Data Protection Law applies) and any other supplementary measures required to enable the lawful transfer of Customer Personal Data. The Parties agree to promptly undertake to amend this DPA if necessary to incorporate an updated data transfer mechanism to maintain compliance with Applicable Data Protection Law.<\/p>\n\n\n\n

8.3            If any Customer Personal Data originates from any country (other than an EEA country) with one or more laws imposing data transfer restrictions or prohibitions and Customer has informed Templafy of such data transfer restrictions or prohibitions, Customer and Templafy shall ensure an appropriate transfer mechanism (satisfying the country\u2019s data transfer requirements) is in place, as reasonably requested by Customer and mutually agreed upon by both Parties, before transferring or accessing Customer\u2019s Data outside of such country. For the avoidance of doubt, this transfer restriction does not apply to Customer\u2019s or its Affiliates\u2019 Authorized Users who have access to the Services and Customer Data, and Templafy shall not be held responsible for actions of Customer or its Affiliates\u2019 Authorized Users. Neither Customer nor its Authorized Users shall be entitled to use the Services in any country with data localization laws that would require Customer\u2019s environment to be hosted in said country.<\/p>\n<\/div>\n<\/div>\n<\/section>\n\n\n\n

\n
\n
\n

\u200b9.  OBLIGATIONS OF THE CUSTOMER<\/h2>\n<\/div>\n\n\n\n
\n

9.1            Customer and Templafy will be separately responsible for conforming with Applicable Data Protection Law, as applicable to each. <\/p>\n\n\n\n

\u200b9.2            Customer will inform Templafy in writing without undue delay following Customer\u2019s discovery of a failure to comply with Applicable Data Protection Law with respect to processing of Personal Data in accordance with this DPA.<\/p>\n\n\n\n

\u200b9.3            Customer is responsible for maintaining current contact information of its dedicated privacy and\/or security contact persons, in addition to the primary administrative contact, within the administrator center of the Services. Templafy will rely on such contact information to fulfill its notification obligations under this DPA, including but not limited to notifications of Sub-processor changes and Data Breaches.<\/p>\n\n\n\n

\u200b9.4            Customer represents and warrants it has provided and will continue to provide all notices and has obtained and will continue to obtain all consents and rights required under Applicable Data Protection Law for Templafy to process Customer Personal Data for the purposes of this Agreement.<\/p>\n<\/div>\n<\/div>\n<\/section>\n\n\n\n

\n
\n
\n

10.  NOTIFICATION OF DATA BREACH<\/h2>\n<\/div>\n\n\n\n
\n

\u200b10.1            Templafy shall without undue delay, and no later than 48 hours, notify Customer in writing on the basis of Section 9.3 of any identified Data Breach.<\/p>\n\n\n\n

\u200b10.2            The notification referred to in section 10.1. will, to the extent possible:<\/p>\n\n\n\n

a) describe the nature of the Data Breach including the categories and approximate number of data subjects concerned and the categories and approximate amount of Personal Data impacted,<\/p>\n\n\n\n

b) provide the Templafy contact details where more information can be obtained,<\/p>\n\n\n\n

c) describe the likely consequences of the Data Breach, and<\/p>\n\n\n\n

d) describe the measures taken or proposed to be taken by Templafy to address the Data Breach, including, where appropriate, measures to mitigate its possible adverse effects.<\/p>\n<\/div>\n<\/div>\n<\/section>\n\n\n\n

\n
\n
\n

11.  ADDITIONAL ASSIGNMENTS<\/h2>\n<\/div>\n\n\n\n
\n

\u200b11.1            In respect of tasks assigned to Templafy, that are not an obligation under this DPA and go beyond Templafy\u2019s statutory obligations, Templafy shall be entitled to charge Customer for the additional resources, time and material necessary to fulfill the required task(s), unless such services are already included in the Services provided under the Agreement.<\/p>\n\n\n\n

\u200b11.2            Templafy will notify Customer in advance of such additional charges and, to the extent possible, provide Customer with a quote of the expected costs.<\/p>\n\n\n\n

\u200b11.3            If Customer does not agree to the costs, Templafy is not required to perform the additional assignment.<\/p>\n<\/div>\n<\/div>\n<\/section>\n\n\n\n

\n
\n
\n

12.  DELETION AND RETURN OF PERSONAL DATA<\/h2>\n<\/div>\n\n\n\n
\n

\u200b12.1            Following the expiration or earlier termination of the Agreement, Templafy will retain Customer Data in a limited function account, securely isolated and protected from any further processing, for 90 days. Once the retention period ends, Templafy shall disable Customer\u2019s account and delete all Customer Personal Data associated with it, or irreversibly anonymize them in such a manner that the data subject is not identifiable, unless Templafy is permitted or required by applicable law, or authorized under this DPA, to retain such data. Encrypted backup copies may persist until overwritten in accordance with standard disaster recovery processes for up to 180 days. At all times during the term of the Agreement, Customer will have the ability to access, extract and delete Customer Personal Data stored in its tenant. <\/p>\n\n\n\n

\u200b12.2            Upon Customer\u2019s request, Templafy shall certify in writing the destruction or complete anonymization of Customer Personal Data.<\/p>\n<\/div>\n<\/div>\n<\/section>\n\n\n\n

\n
\n
\n

13.  LAW ENFORCEMENT REQUESTS<\/h2>\n<\/div>\n\n\n\n
\n

\u200b13.1            If a court, law enforcement authority or intelligence agency contacts Templafy with a demand for Customer Personal Data, Templafy will first assess if it is a legitimate order. If compelled to disclose or provide access to any Customer Personal Data to law enforcement, Templafy will promptly notify Customer and provide a copy of the request, unless legally prohibited from doing so.<\/p>\n\n\n\n

\u200b13.2            Templafy shall only cooperate with the issued request or order if legally obliged to do so and, where possible, Templafy shall judicially object to the request or order or the prohibition to inform Customer about this or to follow the instructions of Customer. Templafy shall not provide more Customer Personal Data than is strictly necessary for complying with the request or order.<\/p>\n<\/div>\n<\/div>\n<\/section>\n\n\n\n

\n
\n
\n

14.  JURISDICTION SPECIFIC TERMS<\/h2>\n<\/div>\n\n\n\n
\n

14.1            To the extent Templafy processes Personal Data originating from and protected by Applicable Data Protection Law in one of the jurisdictions listed in Exhibit 3 (Jurisdiction Specific Terms) of this DPA, the terms specified in Exhibit 3 with respect to the applicable jurisdiction(s) apply in addition to the terms of this DPA.<\/p>\n<\/div>\n<\/div>\n<\/section>\n\n\n\n

\n
\n
\n

15.  LIABILITY<\/h2>\n<\/div>\n\n\n\n
\n

\u200b15.1            Each party\u2019s liability for one or more breaches of this DPA shall be subject to the limitations and exclusions of liability set out in the Agreement.<\/p>\n<\/div>\n<\/div>\n<\/section>\n\n\n\n

\n
\n
\n

16.  LEGAL VENUE AND APPLICABLE LAW<\/h2>\n<\/div>\n\n\n\n
\n

\u200b16.1            This DPA shall be governed by Danish Law.<\/p>\n\n\n\n

\u200b16.2            Any claim or dispute arising from or in connection with this DPA must be settled by the Copenhagen City Court as first instance.<\/p>\n<\/div>\n<\/div>\n<\/section>\n\n\n\n

\n
\n
\n

17.  DEFINITIONS<\/h2>\n<\/div>\n\n\n\n
\n

The terms \u201cData Controller\u201d<\/strong>, \u201cData Processor\u201d<\/strong>, \u201cdata subject\u201d<\/strong>, \u201cprocessing\u201d<\/strong> and \u201cprocess\u201d<\/strong> shall have the meaning given in Applicable Data Protection Law.<\/p>\n\n\n\n

\u201cApplicable Data Protection Law\u201d<\/strong> means any applicable law which applies to each party in any territory in which they process Personal Data and which relates to the protection of individuals with regards to the processing of Personal Data and privacy rights, and may include EU Data Protection Laws, UK Data Protection Laws, Canada\u2019s Personal Information Protection and Electronic Documents Act (\u201cPIPEDA\u201d<\/strong>), the California Consumer Privacy Act, as amended by the California Privacy Right Act of 2020 and its implementing regulation (\u201cCCPA\u201d<\/strong>); the Privacy<\/p>\n\n\n\n

Act 1988 (Cth) of Australia, as amended (\u201cAustralian Privacy Law\u201d<\/strong>), the Virginia\u2019s Consumer Data Protection Act (\u201cVCDPA\u201d<\/strong>); the Colorado Privacy Act (\u201cCPA\u201d<\/strong>); the Connecticut\u2019s Act Concerning Data Privacy and Online Monitoring (\u201cCTDPA\u201d<\/strong>), and the Utah Consumer Privacy Act (\u201cUCPA\u201d<\/strong>).<\/p>\n\n\n\n

\u200b\u201cCustomer Personal Data\u201d <\/strong>means the Personal Data that is generated by or provided to Templafy by, or on behalf of, Customer through use of the Services.<\/p>\n\n\n\n

\u201cData Breach\u201d <\/strong>means a breach of security which results in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, Customer Personal Data processed by Templafy.<\/p>\n\n\n\n

\u200b\u201cEU Data Protection Laws\u201d<\/strong> means all data protection laws and regulation applicable to the European Economic Area (\u201cEEA\u201d<\/strong>) and Switzerland, including the General Data Protection Regulation 2016\/679 (\u201cGDPR\u201d<\/strong>) and supplementing data protection law of the European Union Member States, the ePrivacy Directive 2002\/58\/EC (the \u201cDirective\u201d<\/strong>), together with any European Union Member national law implementing the Directive and the Swiss Federal Data Protection Act (\u201cSwiss DPA\u201d<\/strong>).<\/p>\n\n\n\n

\u200b\u201cPersonal Data\u201d<\/strong> means any information defined under Applicable Data Protection Law as \u201cpersonal data\u201d, \u201cpersonal information\u201d, \u201cpersonally identifiable information\u201d or any other similar term relating to an identified or identifiable natural person.<\/p>\n\n\n\n

\u201cRegulator\u201d<\/strong> means any local, national or multinational agency, department, official, public of statutory person or any regulatory or supervisory authority for administering, providing guidance on, supervising and enforcing Applicable Data Protection Law.<\/p>\n\n\n\n

\u200b\u201cRestricted Country\u201d<\/strong> means a country, territory or jurisdiction which (i) when GDPR applies, is not covered by an adequacy determination by European Commission, as described under the GDPR, (ii) when Swiss DPA applies, is not included on the list of adequate jurisdictions published by the Swiss Regulator or (iii) when UK Data Protection Law applies, is not recognized as providing an adequate level of protection for Personal Data pursuant to Section 17A of the UK GDPR.<\/p>\n\n\n\n

\u201cSensitive Data\u201d<\/strong> means any (i) special categories of Personal Data defined under EU Data Protection Law and UK Data Protection Law, (ii) data relating to criminal convictions and offences defined under EU Data Protection Law and UK Data Protection Law or (iii) within the definition of \u2019sensitive personal information\u201d under the CCPA. <\/p>\n\n\n\n

\u201cStandard Contractual Clauses\u201d <\/strong>means: (i) where the GDPR applies, the contractual clauses annexed to the European Commission\u2019s Implementing Decision 2021\/914 of 4 June, 2021 on standard contractual clauses for the transfer of Personal Data to third countries (\u201cEU SCCs\u201d<\/strong>) and (ii) where the Swiss DPA applies, the standard data protection clauses issued, approved or otherwise recognized by the Swiss Regulator (\u201cSwiss SCCs\u201d<\/strong>), each as amended, supplemented or replaced from time to time.<\/p>\n\n\n\n

\u200b\u201cSub-processor\u201d<\/strong> means any Templafy Affiliate and any sub-contractor engaged by Templafy in the processing of Customer Personal Data under the terms of the Agreement and this DPA.<\/p>\n\n\n\n

“UK Addendum\u201d<\/strong> means the UK Addendum issued by the United Kingdom Regulator under section 119A(1) of the Data Protection Act 2018, being an addendum to the Standard Contractual Clauses.<\/p>\n\n\n\n

\u201cUK Data Protection Law\u201d<\/strong> means all data protection laws and regulation applicable to the United Kingdom, including the United Kingdom\u2019s Data Protection Act 2018 and the GDPR as incorporated into United Kingdom law by virtue of Section 3 of the United Kingdom\u2019s European Union (Withdrawal) Act 2018 (\u201cUK GDPR\u201d), each as amended, supplemented or replaced from time to time.<\/p>\n<\/div>\n<\/div>\n<\/section>\n\n\n\n

\n
\n
\n

18.  SIGNATURES<\/h2>\n<\/div>\n\n\n\n
\n

Signed for and on behalf of Templafy<\/p>\n\n\n\n

Date: 27 March 2026<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\n\n\n\n

Name: Jesper Theill Eriksen<\/p>\n\n\n\n

Title: CEO<\/p>\n<\/div>\n<\/div>\n<\/section>\n\n\n\n

\n
\n
\n

EXHIBIT 1: INFORMATION ABOUT THE PROCESSING<\/h2>\n<\/div>\n\n\n\n
\n

1. The purpose of the data processor\u2019s processing of Personal Data on behalf of the data controller is:<\/strong><\/p>\n\n\n\n

Templafy is a software development company, assigned by Customer to make available to Customer software as a service for supporting the creation of business documents. The content of this DPA reflects the limited amount of Customer Personal Data Templafy handles for Customer for the provision of the Services.<\/p>\n\n\n\n

2. The data processor\u2019s processing of Personal Data on behalf of the data controller shall mainly pertain to (the nature of the processing):<\/strong><\/p>\n\n\n\n

The provision of the Services by Templafy to Customer.<\/p>\n\n\n\n

3. The processing includes the following types of Personal Data about data subjects:<\/strong><\/p>\n\n\n\n

The extent of Personal data processed depends on the use of Services, including AI functionalities. Customer entrusts to Templafy:<\/p>\n\n\n\n