Data Processing Agreement (DPA)
The EventPics DPA under Art. 28 GDPR for everyone who collects their guests' photos and videos with EventPics.
Does the DPA need to be signed?
No. The DPA forms part of our Terms of Service and is concluded electronically when you accept them on signing in. The GDPR expressly allows this (Art. 28(9) GDPR). Providers such as Google, Cloudflare and Amazon Web Services handle it the same way.
Need a signed copy for your records anyway? You can enter your company details and sign on the last page of the PDF. Simply keep it with your records. There is no need to send it back to us.
What does the DPA cover?
- Subject matter, nature and purpose of processing, categories of data and data subjects
- Instructions, confidentiality, breach notification and audit rights
- Deletion and return of data
- Annex 1: technical and organisational measures
- Annex 2: current list of sub-processors with location and safeguards
We announce changes to the list of sub-processors on this page at least 14 days in advance. If you would also like to be notified by email, write to [email protected].
Versions
- v1.2 (September 2026, current): agreement concluded solely by accepting the Terms of Service on signing in
- v1.1 (September 2026): English, Deutsch. Company name Aigner Software e. U., conclusion of the agreement, instructions, audit rights, updated sub-processors and technical measures
- v1.0 (January 2026): English, Deutsch
Questions: [email protected]