Data processing agreement
Processor terms baseline for customer-controlled sustainability data.
This notice is a software product baseline and should be reviewed by qualified legal counsel before production launch.
Role allocation
For customer workspace records, evidence, supplier contacts, and sustainability reporting content, the customer normally acts as controller and the GreenDirective.eu operator acts as processor unless a signed agreement states otherwise.
Processor commitments
The operator should process customer personal data only on documented instructions, maintain confidentiality, apply appropriate technical and organizational measures, support data subject requests, and assist with breach handling where required.
Subprocessors
Authorized subprocessors are listed in the subprocessor notice. Material changes should be notified to customers using the contractual notice channel.
Return and deletion
At contract end, customer-controlled data should be exported, deleted, or retained only where legally required or covered by documented customer instructions.