Do you have a data processing agreement?

As a data controller under the GDPR, Article 28 requires that when you engage a data processor (like Trendful) to process your customers’ data, you impose strict contractual requirements on how they may use and process that data. This is typically done through a Data Processing Addendum (DPA).

Trendful has automatically incorporated a Data Processing Agreement into its terms of service. 

For Trendful Enterprise plan clients, their Enterprise contracts will govern their relationship with Trendful. Enterprise plan clients can sign a Data Processing Addendum to address their needs. Enterprise clients who do not sign will be governed by Trendful’s online Data Processing Addendum. 

Questions to think about:

• Are there any other data processors that you work with outside of Trendful that are contractually committed to protecting your customers’ data?
• Are you an Enterprise plan client?