Data processing agreement (DPA)
This agreement sets out the terms under which newatogi processes personal data on behalf of your organization (Article 28 GDPR).
We provide this DPA to every customer at no additional cost. To execute a signed copy for your records, contact hallo@newatogi.com.
1. Roles of the parties
Your organization is the controller of the personal data you upload and generate on the platform. newatogi acts as the processor and processes that data only on your documented instructions.
2. Subject matter and duration
Processing takes place for the duration of your subscription and covers the personal data necessary to deliver the platform's sponsorship, contract, fulfilment, donation and narrowcasting features.
3. Categories of data and data subjects
Data subjects include your contacts, employees, members, sponsors and donors. Categories include identification and contact data, organizational and financial data, and any content you choose to upload. No special categories are processed by design.
4. Security and confidentiality
newatogi applies appropriate technical and organizational measures (Article 32), including row-level data isolation per organization, encryption in transit, access controls and rate limiting. Personnel are bound by confidentiality.
5. Sub-processors
You grant a general authorization for the sub-processors listed in our privacy statement (including Mollie, Supabase, Vercel, Resend, Sentry, Upstash and Probo). We inform you of any new sub-processor and you may object within 30 days.
6. Assistance and breach notification
We assist you in responding to data subject requests and in meeting your security, DPIA and consultation obligations. We notify you without undue delay, and in any case within 72 hours, after becoming aware of a personal data breach affecting your data.
7. Return and deletion
On termination you can export your data. After the export window we delete or anonymize personal data, except where retention is legally required (for example, invoices retained for tax purposes).
8. Audits
We make available the information necessary to demonstrate compliance with this agreement and, on reasonable request, allow for and contribute to audits, subject to confidentiality and appropriate notice.
To request a signed data processing agreement, contact hallo@newatogi.com.