Data processing agreement

This is a translation for your information. The German version is legally binding. Deutsch

Template – to be reviewed by a lawyer before launch.

This data processing agreement under Art. 28 GDPR is concluded between the Openhouse customer (controller) and the provider of Openhouse (processor) at registration and applies for the term of the user agreement. It covers the processing of tenant, owner, contractor and staff data required to provide the software, documented instructions via the software’s functions, confidentiality, technical and organizational measures (hosting in Germany, TLS, encrypted off-site backups, two-factor sign-in, roles, audit log, separation per customer), the approved sub-processors (hosting provider in Germany, Resend for email with standard contractual clauses, Enable Banking for bank connections, Apple for push notifications), support for data subject requests and breach notifications within 48 hours, audits, and deletion 30 days after the end of the contract. The German version is legally binding.