Draft for legal review. This is not the final version.

1. Parties

This agreement binds the customer, as controller, and [company name, office and registration to be completed], publisher of lien.to, as processor.

2. Purpose and term

lien.to processes personal data solely to provide the service for the subscription term.

3. Processing

Data subjects include link visitors, form prospects and team members. Data includes approximate location, device, browser, source, daily fingerprint, customer-selected fields, name, email and role.

4. Instructions and confidentiality

lien.to acts only on documented customer instructions. Authorized personnel are bound by confidentiality.

5. Security

Encrypted transfers and backups, access control with two-factor authentication, logged administrator access and daily EU backups.

6. Further processors

The current list is public. Customers receive 30 days’ advance notice and may object.

7. Assistance

lien.to assists with data-subject requests, impact assessments and regulator consultations.

8. Transfers

Transfers outside the EU rely on adequacy decisions or applicable standard contractual clauses.

9. Breach

Customers are notified without undue delay and no later than 48 hours after discovery.

10. Audit

Customers may obtain evidence of Article 28 compliance and conduct a reasonable confidential audit.

11. End of agreement

Data is returned on request and deleted within 30 days after the subscription ends, unless law requires retention.

Data processing agreement

Generate your DPA