Data processing agreement

When visitors submit forms on your micro-site, you are the data controller and Fwdia acts as your processor. This agreement is part of the Terms of Service and applies automatically - no signature required.

1. Subject matter & duration

Processing of form submissions and related visitor data on your behalf, for as long as your account exists.

2. Nature and purpose

Storage, display in your form inbox, email notification to you, CSV export, deletion - nothing else. We never use your visitors' data for our own purposes.

3. Your instructions

The features you configure (form fields, notifications, deletion) constitute your documented instructions. We process only within them.

4. Confidentiality & security (art. 32)

Access is restricted to authorized personnel under confidentiality obligations. Measures include TLS, hashed credentials, encrypted secrets, rate limiting, audit logging, backups and least-privilege administration.

5. Sub-processors

Hosting and email delivery providers listed in the privacy policy. We inform account holders of changes 30 days ahead; you may object on reasonable grounds.

6. Assistance & data subject rights

Delete individual submissions from your inbox at any time. We assist with access/erasure requests concerning data we hold for you, and with breach notifications without undue delay (art. 33/34).

7. Deletion & return

Export submissions as CSV anytime. On account deletion all submissions are irreversibly erased within 30 days.

8. Audits

We provide information reasonably necessary to demonstrate compliance and allow audits as required by art. 28(3)(h), under confidentiality.

9. Your obligations as controller

Only collect data you may lawfully collect, inform your visitors (your own privacy notice), and don't request special-category data through forms without a valid legal basis.