Data Processing Agreement

This Data Processing Agreement (“DPA”) forms an integral part of the Agreement between Global Staffing Support B.V. (“GSS”) and the Client. The signed PDF is the controlling text.

Download the Data Processing Agreement (PDF)

Parties

GSS is Global Staffing Support B.V., a private limited liability company incorporated under the laws of the Netherlands, registered with the Dutch Chamber of Commerce under number 09132165, VAT number NL811925225B01, with its registered office at Kraailandhof 63, 3828 JP Hoogland, the Netherlands, operating the NewsIntel service.

This DPA is accepted together with the Terms of Service on formation of the Agreement, including on completion of a self-service checkout. Where the Client requires a signed counterpart, GSS will provide one on request at info@newsintel.eu.

Roles of the Parties

The Service involves several processing activities, summarised as follows (full allocation is in Annex I of the PDF):

• Newsletter recipient lists and documents the Client supplies — GSS is processor, the Client is controller.
• Source monitoring, scraping, generation and validation within the GSS pipeline — GSS is an independent controller.
• Editorial approval of an Article containing personal data — the Parties may be joint controllers (Annex IV).
• Client account, authentication, security, audit logging, support and billing — GSS is controller.

This DPA prevails over the Terms of Service on the qualification of roles and on all matters required to be agreed under Art. 28(3) GDPR.

Sub-processors

The Client gives GSS general written authorisation to engage Sub-processors. The list engaged at the effective date is published on the sub-processors page (Annex III). GSS notifies intended changes at least thirty days in advance. The Client may object on reasonable, documented data-protection grounds within fourteen days.

International transfers

GSS shall not transfer Client Personal Data outside the EEA, nor permit a Sub-processor to do so, except where an adequacy decision (including the EU–US Data Privacy Framework), Standard Contractual Clauses, or another valid Chapter V mechanism applies.

Security and personal data breaches

Technical and organisational measures are set out in Annex II of the PDF. GSS shall notify the Client of a personal data breach affecting Client Personal Data without undue delay, and shall not notify a supervisory authority or data subjects on the Client’s behalf unless instructed or itself obliged to do so as independent controller.

Assistance, audit, retention

GSS assists the Client with data-subject requests, DPIAs and consultations with supervisory authorities, to the extent the information is available to GSS. Audit and information rights, retention, return and deletion are set out in the PDF. Notices under this DPA are given to info@newsintel.eu.

Annexes

• Annex I — Details of the Processing
• Annex II — Technical and organizational measures
• Annex III — Sub-processors
• Annex IV — Joint-controller arrangement (Art. 26 GDPR)
• Annex V — Publishable summary of the joint-controller arrangement

The full annexes, including the joint-controller arrangement made available to data subjects, are in the PDF.