Data Processing Agreement (DPA)

Version 1.0.

This document governs GeoFolks processing personal data on behalf of the Client (Art. 28 GDPR).

Subject matter and duration

Processing to the extent necessary to provide AI brand-visibility measurement services, for the duration of the main agreement.

Nature and purpose

Hosting account and project data, running measurements, generating reports, handling billing and support.

Categories of data and subjects

Panel user contact data (e-mail, full name, phone), company and billing data. Subjects: Client employees and contractors.

Sub-processing

The list of subprocessors (hosting, payments, e-mail, AI model providers) is published in the Trust Center and updated with 14 days notice.

GeoFolks obligations

Technical and organisational measures described in the Trust Center: encryption in transit and at rest, access control, security event logs, backups, incident handling with notification without undue delay.

Client rights

Audit upon justified request, support for data subject rights, return or deletion of data after contract end (subject to legal retention exceptions).

To sign the DPA contact support@geofolks.com.