Legal
Data processing agreement
The terms under which Cliqda processes personal data on a customer's behalf.
PlaceholderThis document is an unreviewed outline, not legal advice and not a binding agreement. It sets out the sections a document of this kind needs and what belongs in each. It must be drafted and reviewed by a qualified lawyer for your jurisdiction before it is published or relied upon.
Outline last edited: 15 August 2026
1. Roles
Customer as controller, Cliqda as processor, for data within connected advertising accounts. Identify where Cliqda acts as controller instead.
2. Subject matter, duration, nature and purpose
The Article 28 particulars: what is processed, for how long, why, the categories of data subject, and the categories of personal data.
3. Processor obligations
Processing only on documented instructions, confidentiality of personnel, security measures, assistance with data subject requests, breach notification, and deletion or return on termination.
4. Sub-processors
General authorisation, the current sub-processor list, the notification mechanism for additions, and the customer’s objection right.
5. International transfers
Transfer mechanism, and the standard contractual clauses incorporated by reference.
6. Audit and information rights
What the customer may request, how often, and on what notice.
7. Security measures
An annex describing the technical and organisational measures — encryption at rest and in transit, access control, logging, backup, and incident response.
8. Annexes
Annex I: processing details and parties. Annex II: security measures. Annex III: sub-processors.