Effective Date: July 9, 2025
This Data Processing Agreement (“DPA”) is entered into between Oshli, located at Coimbra, Portugal (“Processor”), and [Client Name] (“Controller”). It governs the processing of personal data by Oshli on behalf of the Controller, in compliance with Article 28 of the EU General Data Protection Regulation (GDPR). This DPA forms part of the agreement for the use of the Service.
Summary:
This DPA outlines how we process personal data on behalf of our clients, ensuring GDPR compliance.
Summary:
Key terms used in this DPA are defined to clarify roles and responsibilities.
The Processor will process personal data as instructed by the Controller to provide the Service, including account management, form creation, and support. Data includes [e.g., names, emails, form content]. Processing occurs in the EU, US, or other regions, as outlined in the Privacy Policy.
Summary:
We process data as directed by the Controller to deliver the Service.
Summary:
We follow the Controller’s instructions and ensure security and compliance.
The Processor may engage sub-processors (e.g., [AWS, Stripe]) to provide the Service. The Controller is notified of new sub-processors and may object within [30 days].
Summary:
We use approved sub-processors and notify the Controller of changes.
Data may be transferred outside the EEA to regions like the US. We use Standard Contractual Clauses to ensure GDPR-compliant protection.
Summary:
We ensure data transfers outside the EEA meet GDPR standards.
For questions or requests, please contact:
privacy@oshli.com
dpo@oshli.com
Summary:
We are available to address DPA-related inquiries.