Processing & instructions
Purposes, personal data categories, duration and the instructions under which Infaris may process data.
Legal document
Data Processing Agreement
The terms governing how Infaris processes personal data on behalf of business customers under Article 28 GDPR.
Current version · 1.0, 28 July 2026
One agreement, concrete commitments
This model DPA forms part of the main agreement for Infaris services. Complete your organisation details, effective date and any deviating instructions, then have both parties sign it.
- Processor
- IMDigital, trading as Infaris
- Registration
- Dutch Chamber of Commerce 95452354 · Seltershof 15, 6721 AT Bennekom
What the DPA covers
Security
Technical and organisational measures covering access, cryptography, infrastructure, logging and recovery.
Sub-processors
Supplier requirements, change notifications and appropriate safeguards for international transfers.
Rights & incidents
Support for data subject requests, audits, breaches, return and deletion.
How to complete the agreement
- 01
Download
Choose PDF for review or Word to complete the fields digitally.
- 02
Add customer details
Record the contracting party, effective date, privacy contacts and any alternative retention period.
- 03
Sign
Have an authorised representative of both parties sign and retain the DPA with the main agreement.
Good to know
The published version is a model for business customers. Customer-specific terms and the final list of sub-processors actually used are confirmed before signature.
Questions about the DPA?
Email privacy@infaris.com