GDPR Article 28

Data Processing Addendum

This DPA forms part of every paid contract. It auto-applies the moment you upgrade to a paid plan — but if your procurement team needs a counter-signed copy, sign and email it back to us.

How to use this DPA

Download the PDF on the right. It is pre-signed by Kagama GmbH and dated as of last revision. Either sign and return — or simply file it; for paying customers it applies regardless of counter-signature, by reference from the Master Services Agreement.

What it covers

  • Roles & responsibilities (you = controller, Kagama = processor)
  • Subject-matter, duration, nature, and purpose of processing
  • Categories of data subjects and personal data
  • Standard Contractual Clauses (EU 2021/914) for any third-country transfers
  • Subprocessor list with notice obligations (30 days for new additions)
  • Technical & organisational measures (Annex II)
  • Audit rights and incident notification (72 hours)

Need redlines?

For organisations on the Business plan we accept reasonable redlines on Annex I/II. Email legal@kagama.io with your tracked-changes copy. We typically turn around within 5 business days.

Acknowledgement only

If you are on Free, Starter, or Team and just need an acknowledgement on file: download, counter-sign, and reply with the PDF attached. We register it against your workspace within 1 business day.