Data Processing Agreement (DPA / AVV)

Note: This is a template for the Data Processing Agreement (Auftragsverarbeitungsvertrag) pursuant to Art. 28 GDPR.

This Data Processing Agreement ("Agreement") is entered into between:

The Client (as defined in the Terms and Conditions)
— hereinafter referred to as "Controller" —

and

ManageClever is a service provided by:

Samuel Schürmann
Rothschwaiger Feldweg 17 82256 Fürstenfeldbruck Germany
— hereinafter referred to as "Processor" —

1. Subject Matter and Duration

The Processor shall provide the services described in the Terms and Conditions. The duration of this Agreement corresponds to the duration of the main Service Agreement.

2. Type and Purpose of Data Processing

The Processor processes personal data on behalf of the Controller. This includes:

• Types of data: User identity data, contact data, task data, organizational metadata.
• Categories of data subjects: Employees, customers, or partners of the Controller.

3. Obligations of the Processor

• The Processor shall process data only on documented instructions from the Controller.
• The Processor ensures that persons authorized to process the personal data have committed themselves to confidentiality.
• The Processor implements appropriate technical and organizational measures (TOMs) as required by Art. 32 GDPR.

4. Subprocessors

The Controller grants general authorization for the Processor to engage subprocessors. Current subprocessors (e.g., Supabase, Clerk, Render) are listed in the Privacy Policy.

5. Rights of the Controller

The Controller has the right to audit the Processor's compliance with this Agreement.

6. Deletion and Return

Upon termination, the Processor shall delete or return all personal data to the Controller, unless legal retention obligations apply.