Data processing agreement
Last revised: 2026-09-10 · PDF
This data processing agreement forms part of the agreement between you (the customer, controller) and Dayporto B.V. (the processor) and applies to all personal data you process in the platform.
1. Roles and subject matter
You decide which personal data (of e.g. customers, contacts and employees) is processed in the platform and for what purpose. Dayporto B.V. processes this data solely to provide the service, for the duration of the agreement.
2. Instructions
We process the data only on your documented instructions — including this agreement and your use of the platform — and never for our own purposes. Persons with access on our side are bound by confidentiality.
3. Security measures
We implement appropriate technical and organisational measures: encrypted connections, hashed passwords, two-factor authentication, per-customer data separation, access logging and daily backups with periodic restore tests.
4. Sub-processors
For hosting, e-mail delivery and payment processing we engage sub-processors under equivalent obligations. Changes of sub-processors are announced in advance so you can object.
5. Data breaches
In the event of a personal data breach we inform you without undue delay after discovery, with the information you need for your notification duties towards the supervisory authority and data subjects.
6. Data subject rights
The platform includes tooling to handle data subject requests yourself (access, export, erasure). Where needed we provide additional reasonable assistance.
7. Audit and accountability
On request we provide information about the measures taken so you can meet your accountability obligations, and we cooperate with audits within reasonable limits.
8. End of the agreement
After termination you can download all data as an export package. We then delete the personal data according to the retention policy, except where a statutory retention duty applies.