Compliance
You are the controller. We are your processor.
Data processing agreement
You are the controller. We are your processor.
Under the GDPR, you are the controller of your data when you use Fundarem. Where we operate or support your installation, we act as your processor, and GDPR Article 28 requires a written data processing agreement (DPA) between us before that processing starts. We do not have a one-size-fits-all DPA already signed for every visitor to this page — we put one in place with you, built on the same terms below.
Was ein Auftragsverarbeitungsvertrag mit uns abdeckt, in Kürze
- We process personal data only on your documented instructions, and only to run and support Fundarem.
- Fundarem is built to run in your own Azure tenant, in an EU region, and any transfer outside the EU/EEA needs your instruction and a GDPR safeguard.
- Everyone who can access it is bound by confidentiality.
- We list our sub-processors and tell you before we add or change one.
- We help you answer data-subject requests, and tell you about a personal data breach without undue delay, within 72 hours at the latest.
- Because Fundarem is built to run in your own tenant, your data is already there when the contract ends — we simply remove any access we had.
- Our access to your Azure is limited to the one resource group Fundarem is built to run in. After go-live you choose whether we stay in to monitor and assist or keep limited access only, and your admin approves each software update in the admin panel.
Kontakt zur AuftragsverarbeitungFragen Sie uns bei Ihrer Kontaktaufnahme nach einem Auftragsverarbeitungsvertrag.