{"id":15298,"date":"2025-01-21T14:25:07","date_gmt":"2025-01-21T14:25:07","guid":{"rendered":"https:\/\/shoppy.is\/?page_id=15298"},"modified":"2025-01-22T09:27:14","modified_gmt":"2025-01-22T09:27:14","slug":"data-processing-agreement","status":"publish","type":"page","link":"https:\/\/shoppy.is\/en\/data-processing-agreement\/","title":{"rendered":"Data processing agreement\u200b"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Data Processing Agreement under Article 28 of the European Regulation 2016\/679 <\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Last update: January 21, 2025<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t

\n\t\t\t\tA Data Processing Agreement (DPA) is a contract between a company (the data processor) and a service provider (the data processor) that stipulates how personal data is to be processed. It defines the responsibilities of both parties, ensuring data protection in accordance with privacy laws.\nMumble S.r.l. will process data owned by the Merchant in order to provide account management services, App maintenance, and IT service and support.\n\t\t\t<\/p>\n\t\t\t\t\t<\/blockquote>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

This personal data processing agreement (hereinafter, \u201c<\/span>Agreement<\/b>\u201d) supplements the Shoppy <\/span>Service Terms and Conditions<\/b> available at this link<\/strong><\/a><\/span>\u00a0as updated from time to time, or other agreement between Merchant and Mumble governing Merchant’s use of the Services (the \u201c<\/span>Terms<\/b>\u201d).<\/span><\/p>

This Agreement is entered into between Merchant as the Data Controller (hereinafter, in addition to the definitions contained in the Terms, also \u201c<\/span>Data Controller<\/b>\u201d), as defined in the Agreement, and Mumble S.r.l., with registered office at Via Tacito 17 – 41123 – Modena (MO), VAT No. 03525740365, as the Data Processor (hereinafter, in addition to the definitions contained in the Terms, also \u201c<\/span>Data<\/b> Processor<\/b>\u201d), hereinafter, jointly the \u201c<\/span>Parties<\/b>\u201d or severally the \u201c<\/span>Party<\/b>\u201d).<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Whereas<\/strong><\/p>

  • according to Art. 28 of the EU Reg. No. 2016\/679 (hereinafter \u201c<\/span>Regulation<\/b>\u201d or \u201c<\/span>GDPR<\/b>\u201d), the Data Controller may propose a natural person, a legal person, a public administration and any other entity, association or body as the Data Processor, which shall be selected from among entities that, due to their experience, capacity and reliability, provide suitable guarantees of full compliance with the applicable provisions on processing, including security profiles;<\/span><\/li>
  • the Data Processor must present sufficient guarantees to put in place appropriate technical and organizational measures so that the processing meets the requirements of the Regulations and guarantees the protection of the rights of the data subject;<\/span><\/li>
  • the Processor must carry out the processing in accordance with the instructions given by the Controller;<\/span><\/li>
  • the Data Controller shall allow the Data Processor and anyone acting under its authority access only to the personal data whose knowledge is necessary to perform the tasks assigned to them;<\/span><\/li>
  • with this Agreement, the Data Controller intends to appoint Mumble as Data Processor pursuant to Article 28 GDPR.<\/span><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t

    1. Privacy roles<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t
    1. The Data Controller, who is responsible for decisions regarding the purposes and methods of personal data processing, designates Mumble as the Data Processor for the purposes and processing operations indicated in <\/span>Section 2 – Scope of Processing<\/b> of this document, carried out within the framework of the contractual agreements in force.\u00a0<\/span><\/li>
    2. In any case, the Data Controller entrusts the Data Processor with all – and exclusively – the personal data processing operations necessary to fully execute the Terms.<\/span><\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t

      2. Scope of the Data Processor\u2019s processing activities<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t
      \n\t\t\t\n\t\t\t \n\t\t\t \n\t\t\t\t\t\t\t\t\t \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t \t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t \t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t \t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t \t\t\t\t\t\t\t\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span><\/th>\n\t\t\t \t\t\t\t \n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span><\/th>\n\t\t\t \t\t\t\t <\/tr>\n\t\t\t <\/thead>\n\t\t\t \t
      \n\t\t\t\t\t\t\t\t\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t\t\t\t\t

      Personal data<\/b><\/p>\t\t\t\t\t\t\t\t\t\t\t\t<\/div><\/div>\n\t\t\t\t\t\t\t\t\t\t\t<\/td>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t \t\t\t\t\t\t\t\t\t\t\t

      		\n\t\t\t\t\t\t\t\t\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t\t\t\t\t
      • Biographical data: <\/b>first name, last name;<\/span><\/li>
      • Contact data: <\/b>address, e-mail address, phone number;<\/span><\/li>
      • Browsing data: <\/b>IP address, geolocation, information about the operating system used;<\/span><\/li>
      • Usage Data: <\/b>information generated in the context of using the Platform and App, such as e.g. log data, data related to registrations made, interaction processes, performance indicators, data related to navigation flows and feature usage, user ID and device ID;<\/span><\/li>
      • Data related to service requests: <\/b>content of the request<\/span><\/li><\/ul>\t\t\t\t\t\t\t\t\t\t\t\t<\/div><\/div>\n\t\t\t\t\t\t\t\t\t\t\t<\/td>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/tr>\n\t\t\t \t\t\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t\t\t\t\t

      Data subjects<\/b><\/p>\t\t\t\t\t\t\t\t\t\t\t\t<\/div><\/div>\n\t\t\t\t\t\t\t\t\t\t\t<\/td>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t \t\t\t\t\t\t\t\t\t\t\t

      		\n\t\t\t\t\t\t\t\t\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t\t\t\t\t
      • Merchant’s App Visitors<\/span><\/li>
      • Merchant’s App Customers<\/span><\/li><\/ul>\t\t\t\t\t\t\t\t\t\t\t\t<\/div><\/div>\n\t\t\t\t\t\t\t\t\t\t\t<\/td>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/tr>\n\t\t\t \t\t\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t\t\t\t\t

      Purpose<\/b><\/p>\t\t\t\t\t\t\t\t\t\t\t\t<\/div><\/div>\n\t\t\t\t\t\t\t\t\t\t\t<\/td>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t \t\t\t\t\t\t\t\t\t\t\t

      		\n\t\t\t\t\t\t\t\t\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t\t\t\t\t
      • Account Management<\/span><\/li>
      • App Maintenance<\/span><\/li>
      • IT assistance and support<\/span><\/li><\/ul>\t\t\t\t\t\t\t\t\t\t\t\t<\/div><\/div>\n\t\t\t\t\t\t\t\t\t\t\t<\/td>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/tr>\n\t\t\t \t\t\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t\t\t\t\t

      Nature of data processing<\/b><\/p>\t\t\t\t\t\t\t\t\t\t\t\t<\/div><\/div>\n\t\t\t\t\t\t\t\t\t\t\t<\/td>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t \t\t\t\t\t\t\t\t\t\t\t

      		\n\t\t\t\t\t\t\t\t\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t\t\t\t\t
      • Collection<\/span><\/li>
      • Registration<\/span><\/li>
      • Organization<\/span><\/li>
      • Structuring<\/span><\/li>
      • Storage<\/span><\/li>
      • Consultation\u00a0<\/span><\/li>
      • Use<\/span><\/li>
      • Transmission<\/span><\/li><\/ul>\t\t\t\t\t\t\t\t\t\t\t\t<\/div><\/div>\n\t\t\t\t\t\t\t\t\t\t\t<\/td>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/tr>\n\t\t\t \t\t\t <\/tbody>\n\t\t\t<\/table>\n\t\t<\/div>\n\t \t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t

        3. Data Processor duties<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t\t\t\t\t
        1. The Data Processor, to the extent of its competence, is obliged under the law and this Agreement, for itself and its employees and for anyone cooperating with its activity, to comply with the provisions of the Regulations, the applicable national sector legislation, and the provisions and\/or authorizations and\/or guidelines of the Privacy Authority if and insofar as applicable. The Data Processor shall perform the processing functional to the tasks assigned to him\/her in accordance with this Agreement and the purposes for which the data are collected. Should the need arise for processing on personal data different and exceptional than that normally performed, the Data Processor undertakes to inform the Data Controller in advance and in good time, who may object.<\/span><\/li>
        2. The Data Processor, taking into account the state of the art and the cost of implementation, as well as the nature, object, context and purposes of the processing, as well as the risk of varying likelihood and severity to the rights and freedoms of natural persons, shall implement appropriate organizational and technical measures to ensure a level of security appropriate to the risk and to protect the personal data received as provided for in Article 32 of the GDPR. The Data Processor is authorized to implement alternative measures or establish alternative data storage locations provided that the security level of the chosen measures or locations is deemed, in all respects, adequate.<\/span><\/li>
        3. Where the Data Processor discloses personal data covered by this agreement to its personnel, the Data Processor shall ensure that such personnel: <\/span>
          1. has committed to confidentiality or is subject to a legal obligation of confidentiality, and;<\/span><\/li>
          2. processes the Data Controller’s personal data following the instructions of the Data Controller in compliance with the obligations contained in this Agreement.<\/span><\/li><\/ol><\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
            \n\t\t\t\t
            \n\t\t\t\t\t

            4. Data Controller\u2019s duties<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
            \n\t\t\t\t
            \n\t\t\t\t\t\t\t\t\t
            1. The Data Controller undertakes to take all appropriate and necessary actions and will be responsible for the consequences of any unsuitable use of the Service by the Data Controller employees and, in particular, for the confidential storage of the names and passwords for access to the Service.<\/span><\/li>
            2. The Data Controller guarantees that the personal data and\/or special categories of personal data transmitted by him\/her to the Data Processor are collected in compliance with every requirement of the current legislation on the processing of personal data, including the identification of the correct condition of lawfulness. The Data Controller declares that the personal data transferred by him\/her to the Data Processor are accurate, relevant and not in excess of the purposes identified in this agreement. The Data Controller acknowledges that it is the responsibility of the Data Controller to comply with any applicable additional duties and obligations in order to make the transfer of personal data to the Processors and Sub-Processors lawful in accordance with the applicable legal provisions on the protection of personal data.<\/span><\/li>
            3. The Data Controller remains responsible for the processing of information implemented through application procedures developed according to its specifications and\/or through its own IT or telecommunications tools. The Data Processor, at the request of the Data Controller, assists the latter in the procedures before the Privacy Authority or the judicial authority in relation to the activities falling within its competence.<\/span><\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
              \n\t\t\t\t
              \n\t\t\t\t\t

              5. Sub-processors<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
              \n\t\t\t\t
              \n\t\t\t\t\t\t\t\t\t

              The Data Controller agrees that, exclusively for the provision of the Service, the Data Processor may use Sub-Processors to process personal data conferred by the Data Controller. Sub-Processors will be bound by a legal agreement containing the same obligations identified in this Agreement in relation to the protection of personal data processed, including the adoption of appropriate technical and organizational measures. <\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

              \n\t\t\t\t
              \n\t\t\t\t\t

              6. Obligations of cooperation and assistance<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
              \n\t\t\t\t
              \n\t\t\t\t\t\t\t\t\t
              1. The Parties undertake to cooperate in good faith to ensure compliance with the provisions of this Agreement. The Data Processor shall ensure assistance towards the Data Controller in the event of the exercise of the data subject’s rights, in the management of any security incidents and personal data breaches in order to mitigate the possible adverse effects resulting from them.\u00a0<\/span><\/li>
              2. The Data Processor also ensures cooperation with the supervisory authorities, including by taking appropriate technical and organizational measures to ensure compliance with these obligations. <\/span><\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                \n\t\t\t\t
                \n\t\t\t\t\t

                7. Data transfer <\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                \n\t\t\t\t
                \n\t\t\t\t\t\t\t\t\t
                1. To the extent that the Regulation is applicable and there is no Adequacy Decision, Data Controller and Data Processor agree to sign the Standard Contractual Clauses identified by the European Commission. On this point, the Data Controller expressly authorizes the signing of the Model Contractual Clauses, allowing the Data Processor to sign the Model Contractual Clauses with countries outside the European Economic Area on behalf of the Data Controller.<\/span><\/li>
                2. Data Controller acknowledges its responsibility with respect to complying with any applicable additional duties and obligations in order to make the transfer of personal data to Data Processors and Sub-Processors lawful under the applicable provisions of the law on personal data.<\/span><\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t\t

                  8. Return and deletion of data<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                  \n\t\t\t\t
                  \n\t\t\t\t\t\t\t\t\t
                  1. Upon completion of the entrusted processing operations, as well as upon termination for any cause of the processing by the Data Processor or of the relationship underlying the Service, the Data Controller may, at its discretion, instruct the Data Processor to: i) return to the Data Controller the personal data subject to processing or ii) provide for their complete destruction, except only in cases where retention of the data is required by law or other purposes.<\/span><\/li>
                  2. In case no preference is expressed within six months after the termination of the relationship, the Data Controller states that it instructs the Data Processor to automatically delete the data subject to this processing.<\/span><\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                    \n\t\t\t\t
                    \n\t\t\t\t\t

                    9. Data breach<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                    \n\t\t\t\t
                    \n\t\t\t\t\t\t\t\t\t
                    1. The Data Controller acknowledges and agrees that the Data Processor will not be held liable in the event of a personal data breach that is not attributable to the Data Processor’s willful misconduct or gross negligence.<\/span><\/li>
                    2. In the event that the Data Processor becomes aware of a personal data breach, it shall: <\/span>
                      1. take all appropriate measures to contain and mitigate the personal data breach, including notifying the Data Controller without undue delay. The Data Processor reserves the right to determine the measures to be put in place to comply with the applicable legal provision;<\/span><\/li>
                      2. cooperate with the Data Controller to investigate: the nature, categories and approximate number of data subjects involved, the categories and approximate number of personal data involved, and the likely consequences of such breach in a manner commensurate with the seriousness of the breach and its overall impact on the Data Controller and the provision of the Service under this Agreement;<\/span><\/li>
                      3. where the applicable data protection legal provisions require notification to the relevant supervisory authorities and data subjects of a personal data breach, the Data Processor shall comply with the instructions of the Data Controller who alone shall have the right to determine the measures to comply with the applicable provisions and remedy any risk, including (i) determining to whom any notification should be addressed under the applicable legal provisions (ii) determining the content of the notice referred to in the preceding paragraph, as well as any remedial remedies, including the nature and recipients thereof.<\/span><\/li><\/ol><\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                        \n\t\t\t\t
                        \n\t\t\t\t\t

                        10. Duration<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                        \n\t\t\t\t
                        \n\t\t\t\t\t\t\t\t\t
                        1. This appointment will have the same duration as the Terms. Should the latter lapse or become ineffective and for any reason whatsoever, this appointment will also automatically lapse without the need for notice or revocation, and the Data Processor will no longer be entitled to process Data Controller’s data.<\/span><\/li>
                        2. It is understood that this Agreement does not entail any remuneration for the Data Processor, the activities to be performed by the Data Processor under this appointment having already been taken into account in the determination of the remuneration under the Agreement. <\/span><\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

                          Data Processing Agreement under Article 28 of the European Regulation 2016\/679 Last update: January 21, 2025 A Data Processing Agreement (DPA) is a contract between a company (the data processor) and a service provider (the data processor) that stipulates how personal data is to be processed. It defines the responsibilities of both parties, ensuring data […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-15298","page","type-page","status-publish","hentry"],"yoast_head":"\nData processing agreement\u200b - Shoppy<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/shoppy.is\/en\/data-processing-agreement\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Data processing agreement\u200b - Shoppy\" \/>\n<meta property=\"og:description\" content=\"Data Processing Agreement under Article 28 of the European Regulation 2016\/679 Last update: January 21, 2025 A Data Processing Agreement (DPA) is a contract between a company (the data processor) and a service provider (the data processor) that stipulates how personal data is to be processed. It defines the responsibilities of both parties, ensuring data […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/shoppy.is\/en\/data-processing-agreement\/\" \/>\n<meta property=\"og:site_name\" content=\"Shoppy\" \/>\n<meta property=\"article:modified_time\" content=\"2025-01-22T09:27:14+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/shoppy.is\/wp-content\/uploads\/2022\/12\/Logo-Shoppy_positivo.png\" \/>\n\t<meta property=\"og:image:width\" content=\"2250\" \/>\n\t<meta property=\"og:image:height\" content=\"718\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/shoppy.is\\\/en\\\/data-processing-agreement\\\/\",\"url\":\"https:\\\/\\\/shoppy.is\\\/en\\\/data-processing-agreement\\\/\",\"name\":\"Data processing agreement\u200b - Shoppy\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/shoppy.is\\\/en\\\/#website\"},\"datePublished\":\"2025-01-21T14:25:07+00:00\",\"dateModified\":\"2025-01-22T09:27:14+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/shoppy.is\\\/en\\\/data-processing-agreement\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/shoppy.is\\\/en\\\/data-processing-agreement\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/shoppy.is\\\/en\\\/data-processing-agreement\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/shoppy.is\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Data processing agreement\u200b\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/shoppy.is\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/shoppy.is\\\/en\\\/\",\"name\":\"Shoppy\",\"description\":\"Shoppy - mobile App builder for Shopify stores\",\"publisher\":{\"@id\":\"https:\\\/\\\/shoppy.is\\\/en\\\/#organization\"},\"alternateName\":\"Shoppy - mobile app builder for Shopify store\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/shoppy.is\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/shoppy.is\\\/en\\\/#organization\",\"name\":\"Shoppy\",\"url\":\"https:\\\/\\\/shoppy.is\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/shoppy.is\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/shoppy.is\\\/wp-content\\\/uploads\\\/2022\\\/12\\\/Logo-Shoppy_positivo.png\",\"contentUrl\":\"https:\\\/\\\/shoppy.is\\\/wp-content\\\/uploads\\\/2022\\\/12\\\/Logo-Shoppy_positivo.png\",\"width\":2250,\"height\":718,\"caption\":\"Shoppy\"},\"image\":{\"@id\":\"https:\\\/\\\/shoppy.is\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.instagram.com\\\/shoppy.mobileapp\\\/\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/shoppy-mobileapp\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Data processing agreement\u200b - Shoppy","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/shoppy.is\/en\/data-processing-agreement\/","og_locale":"en_US","og_type":"article","og_title":"Data processing agreement\u200b - Shoppy","og_description":"Data Processing Agreement under Article 28 of the European Regulation 2016\/679 Last update: January 21, 2025 A Data Processing Agreement (DPA) is a contract between a company (the data processor) and a service provider (the data processor) that stipulates how personal data is to be processed. It defines the responsibilities of both parties, ensuring data […]","og_url":"https:\/\/shoppy.is\/en\/data-processing-agreement\/","og_site_name":"Shoppy","article_modified_time":"2025-01-22T09:27:14+00:00","og_image":[{"width":2250,"height":718,"url":"https:\/\/shoppy.is\/wp-content\/uploads\/2022\/12\/Logo-Shoppy_positivo.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/shoppy.is\/en\/data-processing-agreement\/","url":"https:\/\/shoppy.is\/en\/data-processing-agreement\/","name":"Data processing agreement\u200b - Shoppy","isPartOf":{"@id":"https:\/\/shoppy.is\/en\/#website"},"datePublished":"2025-01-21T14:25:07+00:00","dateModified":"2025-01-22T09:27:14+00:00","breadcrumb":{"@id":"https:\/\/shoppy.is\/en\/data-processing-agreement\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/shoppy.is\/en\/data-processing-agreement\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/shoppy.is\/en\/data-processing-agreement\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/shoppy.is\/en\/"},{"@type":"ListItem","position":2,"name":"Data processing agreement\u200b"}]},{"@type":"WebSite","@id":"https:\/\/shoppy.is\/en\/#website","url":"https:\/\/shoppy.is\/en\/","name":"Shoppy","description":"Shoppy - mobile App builder for Shopify stores","publisher":{"@id":"https:\/\/shoppy.is\/en\/#organization"},"alternateName":"Shoppy - mobile app builder for Shopify store","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/shoppy.is\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/shoppy.is\/en\/#organization","name":"Shoppy","url":"https:\/\/shoppy.is\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/shoppy.is\/en\/#\/schema\/logo\/image\/","url":"https:\/\/shoppy.is\/wp-content\/uploads\/2022\/12\/Logo-Shoppy_positivo.png","contentUrl":"https:\/\/shoppy.is\/wp-content\/uploads\/2022\/12\/Logo-Shoppy_positivo.png","width":2250,"height":718,"caption":"Shoppy"},"image":{"@id":"https:\/\/shoppy.is\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.instagram.com\/shoppy.mobileapp\/","https:\/\/www.linkedin.com\/company\/shoppy-mobileapp"]}]}},"_links":{"self":[{"href":"https:\/\/shoppy.is\/en\/wp-json\/wp\/v2\/pages\/15298","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/shoppy.is\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/shoppy.is\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/shoppy.is\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/shoppy.is\/en\/wp-json\/wp\/v2\/comments?post=15298"}],"version-history":[{"count":15,"href":"https:\/\/shoppy.is\/en\/wp-json\/wp\/v2\/pages\/15298\/revisions"}],"predecessor-version":[{"id":15343,"href":"https:\/\/shoppy.is\/en\/wp-json\/wp\/v2\/pages\/15298\/revisions\/15343"}],"wp:attachment":[{"href":"https:\/\/shoppy.is\/en\/wp-json\/wp\/v2\/media?parent=15298"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}