Legal
Agreement on commissioned processing pursuant to Art. 28 GDPR
The subject of this data processing agreement (DPA) is the processing of personal data by Softwareentwicklung Sebastian Bleuel (processor) on behalf of the customer (controller) in the context of using the "FarmManager" application. The duration corresponds to the term of the underlying main contract.
The data entered by the controller (e.g. master data of employees, customers and animals, as well as field, fertilisation, plant-protection and financial data) is processed solely for the purpose of providing and operating the application and the agreed features.
The processor processes the data solely on the documented instructions of the controller (Art. 28(3) GDPR), obliges the persons authorised to process the data to confidentiality, assists the controller in fulfilling data-subject rights and notification duties, and deletes or returns the data upon termination of the contract.
The processor implements appropriate technical and organisational measures pursuant to Art. 32 GDPR (including encryption of transmission, access control via roles and permissions, two-factor authentication, strict tenant separation, regular backups and logging). An overview is provided on request.
For clearly defined services, the processor engages further service providers as sub-processors – in particular for hosting and infrastructure, for payment processing (Stripe), for the sending of system e-mails (STRATO AG, Germany), and for automated error diagnostics. If the controller activates telematics interfaces, the telematics and data-exchange platforms connected by the controller are added (e.g. agrirouter/DKE-Data GmbH & Co. KG, Germany; John Deere, USA). The controller consents to the use of these sub-processors; the controller is informed of intended changes in good time and may object to them.
In the course of providing, operating, maintaining, troubleshooting and supporting the application, the processor has the technical ability to access and view all data of all client accounts (tenants) processed on behalf of the controller. Such access takes place solely on the documented instruction of the controller and for the aforementioned purposes, is limited to what is necessary and is subject to confidentiality. The processor does not process the data for its own purposes.
This page summarises the key contents. We will provide the full, ready-to-sign data processing agreement on request in text form: Softwareentwicklung Sebastian Bleuel, Ortesweg 10, 36145 Hofbieber, Germany, e-mail: info@farmmanager.cloud.