Data Processing Agreement

This Data Processing Agreement (DPA) forms an integral part of the Service Agreement and governs the conditions of personal data processing under Art. 28 GDPR.

Version Two s.r.o. acts as Data Processor under GDPR. The customer is the Data Controller.

Approved sub-processors: Amazon Web Services (EU hosting), Cloudflare (CDN, DDoS protection), Sentry (error monitoring – anonymised).

We implement technical and organisational measures under Art. 32 GDPR: encryption in transit (TLS 1.3), encryption at rest (AES-256), access controls, and regular audits.

In the event of a personal data breach, we will notify you within 72 hours of becoming aware of it.