Contract and DPA

Draft. This document is still being prepared and must be reviewed by a lawyer before the site goes live.

1. Subject matter and roles of the parties

   —

2. Categories of data and data subjects

   —

3. Controller instructions

   —

4. Security measures

   —

5. Engaging subprocessors

   —

6. Incident notification

   —

7. Return and deletion of data

   —

8. Audit and reporting

   —