Data Processing Agreement (DPA)

This Data Processing Agreement describes the obligations between the data controller (customer) and the processor (ChefIApp) under GDPR.

For publication and sale, confirm the final text and applicable contractual clauses with your legal team.

1. Subject and instructions

The processor processes personal data only on behalf of the controller and in accordance with documented instructions. The controller warrants that instructions are lawful and that data subjects have been informed.

2. Technical and organisational measures

The processor implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk (confidentiality, integrity, availability). Processing is documented and subject to audit when required by law.

3. Sub-processors and contact

The list of sub-processors and the duration of processing are set out in the service agreement. For questions about the DPA or to exercise rights, use the contact details in the app or in the Privacy Policy.