This Data Processing Agreement (DPA) governs the processing of personal data on behalf according to Art. 28 GDPR.
1. Subject Matter and Duration
The subject of this DPA is the processing of personal data by DoctoPoint on behalf of the customer as part of using the software.
2. Nature and Purpose of Processing
DoctoPoint processes personal data exclusively within the scope of contractually agreed services for practice management.
3. Technical and Organizational Measures
DoctoPoint is under active development. Technical and organizational measures will be agreed upon in writing with the customer prior to any productive processing of personal data and documented in an addendum to this DPA.
4. Subprocessors
DoctoPoint may only engage subprocessors with prior written consent of the customer. A list of all subprocessors is provided.
5. Rights and Obligations of the Customer
The customer remains the controller within the meaning of the GDPR and bears responsibility for the legality of data processing.
6. Support for the Customer
DoctoPoint supports the customer in fulfilling their obligations under the GDPR, especially regarding data subject rights.
Do you have questions about data processing? Contact Us