Data processing agreement
For business customers: our role, our commitments, our subprocessors.
Last updated: August 10, 2026
⚠️ This document is incomplete: the operating legal entity is not yet registered, and the missing details appear in plain text below. It is not binding on anyone as it stands.
Who this is for
This document supplements the terms where you use Market Predikt in a professional capacity and are subject to the GDPR.
For the great majority of our users it does not apply: we process your data as a controller, and the privacy policy is the document that concerns you.
Our respective roles
For your account and subscription data we are the controller: we decide the purposes.
If you entrust us with personal data for which you are the controller, we act as a processor for that data, on your documented instructions.
Our commitments
- Process data only on documented instructions, unless required otherwise by law.
- Bind everyone authorised to process it to an obligation of confidentiality.
- Implement appropriate technical measures: encryption in transit, encryption of secrets at rest, role-based access control, an audit log of administrative actions.
- Assist you in responding to data-subject requests.
- Notify you of any personal data breach without undue delay after becoming aware of it.
- Delete or return the data at the end of the service, at your choice.
- Make available the information needed to demonstrate compliance with these obligations.
Subprocessors
We use the subprocessors listed in the privacy policy. You authorise them by accepting this agreement.
Any addition or replacement will be notified with reasonable notice, during which you may object and, failing agreement, terminate.
International transfers
Transfers outside the European Union rely on the European Commission's standard contractual clauses or on an adequacy decision, depending on the subprocessor.
Signing it
Write to ⟨TODO : data protection contact⟩ stating your entity and intended use. We will send you a signed copy.