If you or your organization is based in the European Union and you ask the visitors of your forms to fill in personal details, the European General Data Protection Regulation (GDPR) applies. The GDPR distinguishes between the controller and the processor, each with its own rights and obligations. Within the meaning of the GDPR you are deemed to be controller and we a processor since we process personal data for you without being subject to your direct authority and you unilaterally determine the purpose and means for the processing. Clause 28 paragraph 3 of the GDPR states that the processing operations must be arranged in an agreement between the controller and the processor: the data processing agreement.
Do you have a Formdesk subscription or do you want to purchase a Formdesk subscription? Then we have prepared such an agreement for your and our convenience. A draft of this agreement can be downloaded
After you have answered the questions below, you will receive a request by email to sign the agreement.
It's possible to use your own data processing agreement if you prefer. We charge $ 500 as a counterpart to the costs of legal support. If you want this please
Postal code and city
Chamber of commerce
Starting date of the subscription
Desired date of signing
Annex A of the agreement must specify of whom you collect personal data, which personal data is requested and for what purpose through your Formdesk forms. If you choose to use a broad form in the (near) future in Formdesk, then you may also need to amend Annex A.
The processing relates to personal data of
For example: visitors to our website, our employees, relations, clients, course participants etc
Which (category of) personal data is concerned
For example: the name, address, contact details, date and place of birth, gender, bank details, medical data, religious beliefs etc.
Personal data are processed for what purpose
For example: registering for ..., drafting an agreement for ..., ordering ..., evaluating ..., requesting ... etc.
In case of a 'personal data breach', who in your organization should be informed in addition to the contact person registered in your account, if any?
= Input is required