← Back to Legal Documents
Data Processing Addendum
Our Data Processing Addendum (DPA) details how we process personal data and our responsibilities under GDPR and other data protection laws.
The DPA is an essential component of our enterprise agreements, ensuring compliance with data protection regulations.
What's Covered in Our DPA
- Data processing purposes and legal basis
- Categories of personal data processed
- Security measures and safeguards
- Data subject rights procedures
- International transfer mechanisms
- Incident notification procedures
- Roles of Datastory as processor and customer as controller
- Use of trusted subprocessors and transparency obligations
- Breach notification obligations under GDPR
- International transfers safeguarded by Standard Contractual Clauses (SCCs)
Our DPA includes Standard Contractual Clauses (SCCs) approved by the European Commission for international data transfers and meets the requirements of GDPR Article 28.
For enterprise customers or those requiring a signed DPA, please contact our Data Protection team at hello@datastory.tech or at:
Datastory Tech AB
C/O Embassy House
Östgötagatan 12
116 25 Stockholm, Sweden
Standard data processing information is available in our Privacy Policy.
