Data processing agreement
Auftragsverarbeitungsvertrag (AVV), Art. 28 GDPR
Last updated: 5 October 2026
Who needs this
If you use Brandaddy for your own name, the privacy policy applies and you do not need this agreement.
If you are a business and you enter personal data of other persons into Brandaddy for your own purposes (for example, an agency that checks names for its clients), we process that data for you. For that case, Art. 28 GDPR requires a data processing agreement between you and Impact84 UG (haftungsbeschränkt).
What the agreement covers
- Subject and period: the processing lasts as long as you use your account.
- Type of data: account email addresses, the names and descriptions you enter, reports.
- Instructions: we process the data only to supply the service you request.
- Confidentiality: each person with access is bound to confidentiality.
- Security: encrypted transport, access control, and separate storage for payment data at Stripe.
- Sub-processors: the providers in section 4 of the privacy policy. We tell you before we add one.
- Support: we help you answer requests from data subjects and authorities.
- End of contract: we delete your data when you ask, unless the law requires us to keep it.
How to get a signed agreement
Send a request through the contact form or to support@brandaddy.app. Give your company name and address. We send you the agreement to sign.