{"id":2661,"date":"2026-08-11T13:11:36","date_gmt":"2026-08-11T11:11:36","guid":{"rendered":"https:\/\/staging.elyxion.eu\/?page_id=2661"},"modified":"2026-08-13T12:00:58","modified_gmt":"2026-08-13T10:00:58","slug":"data-processing-agreement","status":"publish","type":"page","link":"https:\/\/staging.elyxion.eu\/nl\/trust-center\/data-processing-agreement\/","title":{"rendered":"Data Processing Agreement"},"content":{"rendered":"<div class=\"wpb-content-wrapper\"><div class=\"vc_row wpb_row top-row porto-inner-container wpb_custom_034b39d9bc6c6b310d69e39f0ccf274f\"><div class=\"porto-wrap-container container\"><div class=\"row\"><div class=\"vc_column_container col-md-12\"><div class=\"wpb_wrapper vc_column-inner\"><div class=\"vc_empty_space\"   style=\"height: 50px\"><span class=\"vc_empty_space_inner\"><\/span><\/div>\r\n\t<div class=\"wpb_text_column wpb_content_element wpb_custom_7c91d232724f73626cc933bd95b25ff0\" >\r\n\t\t<div class=\"wpb_wrapper\">\r\n\t\t\t<h2><span style=\"font-size: 20px;\">1. Parties and Incorporation<\/span><\/h2>\n<p>This DPA forms part of the Agreement between the Customer as controller (or processor acting for another controller) and <strong>elyXion B.V.<\/strong> trading as <strong>elyXion<\/strong>, as processor (or subprocessor). It applies only to Customer Personal Data processed by <strong>elyXion<\/strong> on the Customer&#8217;s documented instructions.<\/p>\n<h2><span style=\"font-size: 20px;\">2. Definitions<\/span><\/h2>\n<p>Terms such as controller, processor, personal data, processing, data subject, personal data breach, supervisory authority, and special categories have the meanings in the GDPR. **Applicable Data Protection Law** means the GDPR, Dutch GDPR Implementation Act, and other mandatory data protection law applicable to the processing.<\/p>\n<h2><span style=\"font-size: 20px;\">3. Scope and Instructions<\/span><\/h2>\n<p><strong>elyXion<\/strong> will process Customer Personal Data only to provide and secure the Services, to follow the Agreement and Customer&#8217;s documented instructions, and to comply with the law. The Agreement, service configuration, support requests, and authorised written directions constitute instructions.<\/p>\n<p>If <strong>elyXion<\/strong> believes an instruction infringes Applicable Data Protection Law, it will inform the Customer unless prohibited and may pause the affected processing. Additional instructions requiring material work or cost are subject to change control.<\/p>\n<h2><span style=\"font-size: 20px;\">4. Customer Obligations<\/span><\/h2>\n<p><strong>The Customer warrants that:<\/strong><\/p>\n<ul>\n<li>It has lawful authority, transparency, and legal bases for the processing and instructions;<\/li>\n<li>Its instructions are complete, lawful, and within the Services;<\/li>\n<li>It has assessed whether the Services and agreed measures are appropriate for its risks;<\/li>\n<li>It will not provide special-category, criminal-offence, children&#8217;s, or other high-risk data unless identified and safeguarded in Annex 1; and<\/li>\n<li>Where it acts as processor, its controller has authorised <strong>elyXion<\/strong> as subprocessor.<\/li>\n<\/ul>\n<h2><span style=\"font-size: 20px;\">5. Confidentiality and Personnel<\/span><\/h2>\n<p><strong>elyXion<\/strong> will ensure persons authorised to process Customer Personal Data are bound by confidentiality and receive relevant security and privacy instruction. Access is limited according to role and need.<\/p>\n<h2><span style=\"font-size: 20px;\">6. Security<\/span><\/h2>\n<p><strong>elyXion<\/strong> will implement appropriate technical and organisational measures considering state of the art, implementation cost, processing nature and context, and risk to individuals. Baseline measures are in Annex 2. Specific commitments in the Order Form take precedence.<\/p>\n<p>The Customer acknowledges that security is shared and will implement its allocated measures, including user administration, lawful configuration, endpoint security, data classification, and backup duties.<\/p>\n<h2><span style=\"font-size: 20px;\">7. Subprocessors<\/span><\/h2>\n<p>The Customer gives general authorisation for subprocessors listed in the Subprocessor List. <strong>elyXion<\/strong> will impose data-protection obligations providing materially equivalent protection for relevant processing and remains responsible for subprocessor performance as required by law.<\/p>\n<p><strong>elyXion<\/strong> will give at least <span style=\"color: #ff0000;\">[SUBPROCESSOR NOTICE PERIOD]<\/span> notice of a new subprocessor where reasonably possible. The Customer may object on reasonable data-protection grounds within <span style=\"color: #ff0000;\">[OBJECTION PERIOD]<\/span>. The parties will seek a practical alternative. If none is reasonably available, either party may terminate the affected Service; refund or fee treatment follows the Agreement.<\/p>\n<h2><span style=\"font-size: 20px;\">8. International transfers<\/span><\/h2>\n<p><strong>elyXion<\/strong> will not transfer Customer Personal Data outside the EEA except under a valid GDPR Chapter V mechanism. Where required, the parties incorporate the European Commission Standard Contractual Clauses using the applicable module, with the DPA and annexes supplying required details. elyXion will support reasonable transfer assessments and supplementary measures.<\/p>\n<p>Remote access from a third country may constitute a transfer and is treated accordingly.<\/p>\n<h2><span style=\"font-size: 20px;\">9. Data-subject rights<\/span><\/h2>\n<p>Considering the nature of processing, <strong>elyXion<\/strong> will provide reasonable assistance for access, correction, deletion, restriction, portability, objection, and automated-decision requests. If elyXion receives a request directly relating to Customer Personal Data, it will not respond substantively except on Customer instruction or legal requirement and will forward it where identifiable.<\/p>\n<p>Additional work beyond standard functionality may be chargeable unless caused by <strong>elyXion &#8216;s<\/strong> breach.<\/p>\n<h2><span style=\"font-size: 20px;\">10. Personal Data Breaches<\/span><\/h2>\n<p><strong>elyXion<\/strong> will notify the Customer without undue delay after becoming aware of a confirmed Personal Data Breach affecting Customer Personal Data. The initial notice may be phased and will include available information on nature, likely consequences, affected data and people, mitigation, and contact point.<\/p>\n<p><strong>elyXion<\/strong> will investigate, contain, remediate, preserve appropriate evidence, and cooperate reasonably. Notification is not an admission of fault. The Customer is responsible for deciding and making controller notifications to authorities and individuals, unless law assigns otherwise.<\/p>\n<p>The contractual notification target, if any, is <span style=\"color: #ff0000;\">[BREACH NOTIFICATION TARGET]<\/span>. It must not be described as a guarantee before operational validation.<\/p>\n<h2><span style=\"font-size: 20px;\">11. DPIAs and Prior Consultation<\/span><\/h2>\n<p><strong>elyXion<\/strong> will provide information reasonably available to help the Customer conduct data protection impact assessments and prior consultation related to the Services. elyXion does not provide legal advice or assume the Customer&#8217;s controller duties.<\/p>\n<h2><span style=\"font-size: 20px;\">12. Records and Regulatory Cooperation<\/span><\/h2>\n<p><strong>elyXion<\/strong> will maintain processor records required by law and cooperate with a competent supervisory authority as legally required. Each party is responsible for its own records and notices.<\/p>\n<h2><span style=\"font-size: 20px;\">13. Audits<\/span><\/h2>\n<p><strong>elyXion<\/strong> will make available information reasonably necessary to demonstrate Article 28 compliance. The Customer should first use current policies, questionnaires, independent reports, or remote evidence.<\/p>\n<p>If additional audit is reasonably necessary, it will be conducted no more than once annually unless triggered by a material incident or authority; during business hours; with reasonable notice; by qualified, independent auditors bound by confidentiality; without accessing other customers&#8217; information; and at the Customer&#8217;s cost unless the audit identifies <strong>elyXion &#8216;s<\/strong> material breach.<\/p>\n<p><strong>elyXion<\/strong> may redact security-sensitive information and provide alternative evidence.<\/p>\n<h2><span style=\"font-size: 20px;\">14. Return and Deletion<\/span><\/h2>\n<p>At service end and on Customer choice, <strong>elyXion<\/strong> will return or delete Customer Personal Data, unless law requires retention. Standard export formats and timing depend on the Service. Data in backups is deleted through normal rotation and remains protected and unavailable for ordinary use.<\/p>\n<p>The Customer must request exports before the stated offboarding deadline. <strong>elyXion<\/strong> may retain minimal legal, billing, security, and evidentiary records as an independent controller.<\/p>\n<h2><span style=\"font-size: 20px;\">15. Government Requests<\/span><\/h2>\n<p><strong>elyXion<\/strong> will assess legally binding requests, seek to limit overbroad demands, and notify the Customer where lawful. It will not voluntarily provide Customer Personal Data to authorities except for an emergency involving serious harm where law permits and appropriate review occurs.<\/p>\n<h2><span style=\"font-size: 20px;\">16. Liability and Term<\/span><\/h2>\n<p>Liability under this DPA is subject to the Agreement except where mandatory law provides otherwise. This DPA lasts while <strong>elyXion<\/strong> processes Customer Personal Data.<\/p>\n\r\n\t\t<\/div>\r\n\t<\/div>\r\n\r\n\t<div class=\"wpb_text_column wpb_content_element vc_custom_1786448997352 wpb_custom_7c91d232724f73626cc933bd95b25ff0\" >\r\n\t\t<div class=\"wpb_wrapper\">\r\n\t\t\t<p><span style=\"color: #357386;\"><strong>ANNEX 1 \u2014 PROCESSING DETAILS<\/strong><\/span><\/p>\n<table style=\"width: 100%; border-collapse: collapse; border: 1px solid #4a9ea0;\">\n<thead>\n<tr>\n<th style=\"border: 1px solid #4a9ea0; padding: 10px; text-align: left; background: #4a9ea0; color: #ffffff;\">Item<\/th>\n<th style=\"border: 1px solid #4a9ea0; padding: 10px; text-align: left; background: #4a9ea0; color: #ffffff;\">Description to complete<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\">Subject matter<\/td>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\">Provision of <span style=\"color: #ff0000;\">[SERVICES]<\/span><\/td>\n<\/tr>\n<tr>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\">Duration<\/td>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\">Agreement term plus agreed deletion\/backup period<\/td>\n<\/tr>\n<tr>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\">Nature and purpose<\/td>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\">Hosting, access, administration, monitoring, support, migration, security, integration, backup, reporting, and other documented operations<\/td>\n<\/tr>\n<tr>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\">Data subjects<\/td>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\">Customer employees, contractors, users, clients, suppliers, patients, students, citizens, or others as specifically identified<\/td>\n<\/tr>\n<tr>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\">Personal data<\/td>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\">Identity, contact, account, device, log, support, business, communications, and other categories specifically identified<\/td>\n<\/tr>\n<tr>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\">Special categories<\/td>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\"><span style=\"color: #ff0000;\">[NONE EXPECTED \/ DESCRIBE AND SAFEGUARDS]<\/span><\/td>\n<\/tr>\n<tr>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\">Criminal data<\/td>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\"><span style=\"color: #ff0000;\">[NONE EXPECTED \/ DESCRIBE AND SAFEGUARDS]<\/span><\/td>\n<\/tr>\n<tr>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\">Processing frequency<\/td>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\"><span style=\"color: #ff0000;\">[CONTINUOUS \/ OCCASIONAL \/ PROJECT-BASED]<\/span><\/td>\n<\/tr>\n<tr>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\">Retention<\/td>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\"><span style=\"color: #ff0000;\">[SCHEDULE]<\/span><\/td>\n<\/tr>\n<tr>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\">Controller instructions<\/td>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\">Agreement, configuration, tickets, change approvals, and authorised written instructions<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\r\n\t\t<\/div>\r\n\t<\/div>\r\n<div class=\"vc_row wpb_row vc_inner row\"><div class=\"vc_column_container col-md-6\"><div class=\"wpb_wrapper vc_column-inner\">\r\n\t<div class=\"wpb_text_column wpb_content_element vc_custom_1786449105601 wpb_custom_7c91d232724f73626cc933bd95b25ff0\" >\r\n\t\t<div class=\"wpb_wrapper\">\r\n\t\t\t<p><span style=\"color: #357386;\"><strong>ANNEX 2 \u2014 BASELINE TECHNICAL AND ORGANISATIONAL MEASURES<\/strong><\/span><\/p>\n<p><strong>2.1 Governance<\/strong><\/p>\n<ul>\n<li>Defined security and privacy responsibilities.<\/li>\n<li>Risk-based policies and periodic review.<\/li>\n<li>Confidentiality obligations and awareness.<\/li>\n<li>Supplier due diligence proportionate to risk.<\/li>\n<\/ul>\n<p><strong>2.2 Identity and Access<\/strong><\/p>\n<ul>\n<li>Unique identities where practicable.<\/li>\n<li>Multi-factor authentication for privileged and remote administrative access.<\/li>\n<li>Role-based access and least privilege.<\/li>\n<li>Joiner, mover, leaver processes and periodic access review.<\/li>\n<li>Controlled privileged credentials and service principals.<\/li>\n<\/ul>\n<p><strong>2.3 Cryptography and Secrets<\/strong><\/p>\n<ul>\n<li>Encryption in transit using current supported protocols.<\/li>\n<li>Encryption at rest where supported and appropriate.<\/li>\n<li>Secrets kept out of source code and managed through approved stores.<\/li>\n<li>Key and certificate lifecycle practices proportionate to service.<\/li>\n<\/ul>\n<p><strong>2.4 Infrastructure and Application Security<\/strong><\/p>\n<ul>\n<li>Secure configuration baselines.<\/li>\n<li>Segmentation and restricted administrative interfaces where appropriate.<\/li>\n<li>Patch and vulnerability management based on risk.<\/li>\n<li>Change control, peer review, testing, and rollback for material changes.<\/li>\n<li>Dependency and source-control practices for software delivery.<\/li>\n<\/ul>\n\r\n\t\t<\/div>\r\n\t<\/div>\r\n<\/div><\/div><div class=\"vc_column_container col-md-6\"><div class=\"wpb_wrapper vc_column-inner\">\r\n\t<div class=\"wpb_text_column wpb_content_element vc_custom_1786449004302 wpb_custom_7c91d232724f73626cc933bd95b25ff0\" >\r\n\t\t<div class=\"wpb_wrapper\">\r\n\t\t\t<p><span style=\"color: #ffffff;\"><strong>.<\/strong><\/span><\/p>\n<p><strong>2.5 Logging and Monitoring<\/strong><\/p>\n<ul>\n<li>Security-relevant authentication and administrative logs.<\/li>\n<li>Time synchronisation and restricted log access.<\/li>\n<li>Alerting and investigation according to service scope.<\/li>\n<li>Retention aligned with risk, purpose, and law.<\/li>\n<\/ul>\n<p><strong>2.6 Resilience<\/strong><\/p>\n<ul>\n<li>Backups where included, protected from ordinary modification.<\/li>\n<li>Recovery and continuity procedures proportionate to service.<\/li>\n<li>Periodic restoration or continuity testing according to plan.<\/li>\n<\/ul>\n<p><strong>2.7 Incident Management<\/strong><\/p>\n<ul>\n<li>Reporting, triage, containment, remediation, and lessons-learned process.<\/li>\n<li>Evidence preservation and communication roles.<\/li>\n<li>Personal-data-breach assessment and notification workflow.<\/li>\n<\/ul>\n<p><strong>2.8 Data Management<\/strong><\/p>\n<ul>\n<li>Data minimisation and environment separation where appropriate.<\/li>\n<li>Controlled export, deletion, and media handling.<\/li>\n<li>Test data selected to reduce unnecessary personal-data exposure.<\/li>\n<\/ul>\n\r\n\t\t<\/div>\r\n\t<\/div>\r\n<\/div><\/div><\/div>\r\n\t<div class=\"wpb_text_column wpb_content_element vc_custom_1786449011388 wpb_custom_7c91d232724f73626cc933bd95b25ff0\" >\r\n\t\t<div class=\"wpb_wrapper\">\r\n\t\t\t<p><span style=\"color: #357386;\"><strong>ANNEX 3 \u2014 APPROVED SUBPROCESSORS<\/strong><\/span><\/p>\n<p>The current <span style=\"color: #ff0000;\">[Subprocessor List](subprocessors.md)<\/span> is incorporated. Customer-specific additions may appear in the Order Form.<\/p>\n<p><span style=\"color: #357386;\"><strong>ANNEX 4 \u2014 INTERNATIONAL TRANSFER SETTINGS<\/strong><\/span><\/p>\n<table style=\"width: 100%; border-collapse: collapse; border: 1px solid #4a9ea0;\">\n<thead>\n<tr>\n<th style=\"border: 1px solid #4a9ea0; padding: 10px; text-align: left; background: #4a9ea0; color: #ffffff;\">Item<\/th>\n<th style=\"border: 1px solid #4a9ea0; padding: 10px; text-align: left; background: #4a9ea0; color: #ffffff;\">Position<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\">Primary EEA location<\/td>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\"><span style=\"color: #ff0000;\">[REGIONS]<\/span><\/td>\n<\/tr>\n<tr>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\">Transfer mechanism<\/td>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\">Adequacy decision, SCCs, or other lawful mechanism<\/td>\n<\/tr>\n<tr>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\">SCC module<\/td>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\"><span style=\"color: #ff0000;\">[MODULE 2 OR 3, AS APPLICABLE]<\/span><\/td>\n<\/tr>\n<tr>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\">Docking clause<\/td>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\">Included where agreed<\/td>\n<\/tr>\n<tr>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\">Supervisory authority<\/td>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\">Autoriteit Persoonsgegevens or other competent authority<\/td>\n<\/tr>\n<tr>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\">Supplementary measures<\/td>\n<td style=\"border: 1px solid #4a9ea0; padding: 10px;\">Encryption, access control, minimisation, transparency, and provider-specific measures as assessed<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\r\n\t\t<\/div>\r\n\t<\/div>\r\n<\/div><\/div><\/div><\/div><\/div><div class=\"vc_row wpb_row top-row vc_custom_1786610676651 vc_row-has-fill porto-inner-container wpb_custom_034b39d9bc6c6b310d69e39f0ccf274f\"><div class=\"porto-wrap-container container\"><div class=\"row\"><div class=\"vc_column_container col-md-6 vc_custom_1786436452278\"><div class=\"wpb_wrapper vc_column-inner\">\r\n\t<div class=\"wpb_text_column wpb_content_element vc_custom_1786446460806 wpb_custom_7c91d232724f73626cc933bd95b25ff0\" >\r\n\t\t<div class=\"wpb_wrapper\">\r\n\t\t\t<table>\n<tbody>\n<tr>\n<td width=\"150\"><strong>Owner:<\/strong><\/td>\n<td width=\"250\">elyXion<\/td>\n<\/tr>\n<tr>\n<td width=\"150\"><strong>Version:<\/strong><\/td>\n<td width=\"250\">1.0<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\r\n\t\t<\/div>\r\n\t<\/div>\r\n<\/div><\/div><div class=\"vc_column_container col-md-6\"><div class=\"wpb_wrapper vc_column-inner\">\r\n\t<div class=\"wpb_text_column wpb_content_element vc_custom_1786446473716 wpb_custom_7c91d232724f73626cc933bd95b25ff0\" >\r\n\t\t<div class=\"wpb_wrapper\">\r\n\t\t\t<table>\n<tbody>\n<tr>\n<td width=\"150\"><strong>Last updated:<\/strong><\/td>\n<td width=\"250\">11 Aug 2026<\/td>\n<\/tr>\n<tr>\n<td width=\"150\"><strong>Status:<\/strong><\/td>\n<td width=\"250\">Draft for legal and operational review<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\r\n\t\t<\/div>\r\n\t<\/div>\r\n<\/div><\/div><\/div><\/div><\/div><div class=\"vc_row wpb_row row top-row wpb_custom_034b39d9bc6c6b310d69e39f0ccf274f\"><div class=\"vc_column_container col-md-12\"><div class=\"wpb_wrapper vc_column-inner\"><div class=\"vc_empty_space\"   style=\"height: 50px\"><span class=\"vc_empty_space_inner\"><\/span><\/div><div class=\"vc_empty_space\"   style=\"height: 50px\"><span class=\"vc_empty_space_inner\"><\/span><\/div><\/div><\/div><\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"1. Parties and Incorporation This DPA forms part of the Agreement between the Customer as controller (or processor acting for another controller) and elyXion B.V. trading as elyXion, as processor (or subprocessor). It applies only to Customer Personal Data processed by elyXion on the Customer's documented instructions. 2. Definitions Terms such as controller, processor, personal [...]","protected":false},"author":1,"featured_media":1195,"parent":2548,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"content-type":"","rs_blank_template":"","rs_page_bg_color":"","slide_template_v7":"","footnotes":""},"class_list":["post-2661","page","type-page","status-publish","has-post-thumbnail","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Data Processing Agreement (DPA) | elyXion<\/title>\n<meta name=\"description\" content=\"Review the elyXion Data Processing Agreement covering personal data processing, data protection responsibilities, subprocessors, security and international transfers.\" \/>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"nl_NL\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Data Processing Agreement (DPA) | elyXion\" \/>\n<meta property=\"og:description\" content=\"Review the elyXion Data Processing Agreement covering personal data processing, data protection responsibilities, subprocessors, security and international transfers.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/staging.elyxion.eu\/nl\/trust-center\/data-processing-agreement\/\" \/>\n<meta property=\"og:site_name\" content=\"elyXion\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-13T10:00:58+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/staging.elyxion.eu\/wp-content\/uploads\/2026\/07\/elyXion-Feature-Image.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"800\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"7 minuten\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/staging.elyxion.eu\\\/nl\\\/trust-center\\\/data-processing-agreement\\\/\",\"url\":\"https:\\\/\\\/staging.elyxion.eu\\\/nl\\\/trust-center\\\/data-processing-agreement\\\/\",\"name\":\"Data Processing Agreement (DPA) | elyXion\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/staging.elyxion.eu\\\/nl\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/staging.elyxion.eu\\\/nl\\\/trust-center\\\/data-processing-agreement\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/staging.elyxion.eu\\\/nl\\\/trust-center\\\/data-processing-agreement\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/staging.elyxion.eu\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/elyXion-Feature-Image.jpg\",\"datePublished\":\"2026-08-11T11:11:36+00:00\",\"dateModified\":\"2026-08-13T10:00:58+00:00\",\"description\":\"Review the elyXion Data Processing Agreement covering personal data processing, data protection responsibilities, subprocessors, security and international transfers.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/staging.elyxion.eu\\\/nl\\\/trust-center\\\/data-processing-agreement\\\/#breadcrumb\"},\"inLanguage\":\"nl-NL\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/staging.elyxion.eu\\\/nl\\\/trust-center\\\/data-processing-agreement\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"nl-NL\",\"@id\":\"https:\\\/\\\/staging.elyxion.eu\\\/nl\\\/trust-center\\\/data-processing-agreement\\\/#primaryimage\",\"url\":\"https:\\\/\\\/staging.elyxion.eu\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/elyXion-Feature-Image.jpg\",\"contentUrl\":\"https:\\\/\\\/staging.elyxion.eu\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/elyXion-Feature-Image.jpg\",\"width\":1200,\"height\":800,\"caption\":\"Advancing Intelligence Through Logic and Innovation\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/staging.elyxion.eu\\\/nl\\\/trust-center\\\/data-processing-agreement\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/staging.elyxion.eu\\\/nl\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Data Processing Agreement\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/staging.elyxion.eu\\\/nl\\\/#website\",\"url\":\"https:\\\/\\\/staging.elyxion.eu\\\/nl\\\/\",\"name\":\"elyXion\",\"description\":\"Advancing Intelligence Through Logic and Innovation to deliver secure, scalable Microsoft solutions, powered by European-owned infrastructure through the elyXion Portal.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/staging.elyxion.eu\\\/nl\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"nl-NL\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Data Processing Agreement (DPA) | elyXion","description":"Review the elyXion Data Processing Agreement covering personal data processing, data protection responsibilities, subprocessors, security and international transfers.","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"nl_NL","og_type":"article","og_title":"Data Processing Agreement (DPA) | elyXion","og_description":"Review the elyXion Data Processing Agreement covering personal data processing, data protection responsibilities, subprocessors, security and international transfers.","og_url":"https:\/\/staging.elyxion.eu\/nl\/trust-center\/data-processing-agreement\/","og_site_name":"elyXion","article_modified_time":"2026-08-13T10:00:58+00:00","og_image":[{"width":1200,"height":800,"url":"https:\/\/staging.elyxion.eu\/wp-content\/uploads\/2026\/07\/elyXion-Feature-Image.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"7 minuten"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/staging.elyxion.eu\/nl\/trust-center\/data-processing-agreement\/","url":"https:\/\/staging.elyxion.eu\/nl\/trust-center\/data-processing-agreement\/","name":"Data Processing Agreement (DPA) | elyXion","isPartOf":{"@id":"https:\/\/staging.elyxion.eu\/nl\/#website"},"primaryImageOfPage":{"@id":"https:\/\/staging.elyxion.eu\/nl\/trust-center\/data-processing-agreement\/#primaryimage"},"image":{"@id":"https:\/\/staging.elyxion.eu\/nl\/trust-center\/data-processing-agreement\/#primaryimage"},"thumbnailUrl":"https:\/\/staging.elyxion.eu\/wp-content\/uploads\/2026\/07\/elyXion-Feature-Image.jpg","datePublished":"2026-08-11T11:11:36+00:00","dateModified":"2026-08-13T10:00:58+00:00","description":"Review the elyXion Data Processing Agreement covering personal data processing, data protection responsibilities, subprocessors, security and international transfers.","breadcrumb":{"@id":"https:\/\/staging.elyxion.eu\/nl\/trust-center\/data-processing-agreement\/#breadcrumb"},"inLanguage":"nl-NL","potentialAction":[{"@type":"ReadAction","target":["https:\/\/staging.elyxion.eu\/nl\/trust-center\/data-processing-agreement\/"]}]},{"@type":"ImageObject","inLanguage":"nl-NL","@id":"https:\/\/staging.elyxion.eu\/nl\/trust-center\/data-processing-agreement\/#primaryimage","url":"https:\/\/staging.elyxion.eu\/wp-content\/uploads\/2026\/07\/elyXion-Feature-Image.jpg","contentUrl":"https:\/\/staging.elyxion.eu\/wp-content\/uploads\/2026\/07\/elyXion-Feature-Image.jpg","width":1200,"height":800,"caption":"Advancing Intelligence Through Logic and Innovation"},{"@type":"BreadcrumbList","@id":"https:\/\/staging.elyxion.eu\/nl\/trust-center\/data-processing-agreement\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/staging.elyxion.eu\/nl\/"},{"@type":"ListItem","position":2,"name":"Data Processing Agreement"}]},{"@type":"WebSite","@id":"https:\/\/staging.elyxion.eu\/nl\/#website","url":"https:\/\/staging.elyxion.eu\/nl\/","name":"elyXion","description":"Advancing Intelligence Through Logic and Innovation to deliver secure, scalable Microsoft solutions, powered by European-owned infrastructure through the elyXion Portal.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/staging.elyxion.eu\/nl\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"nl-NL"}]}},"_links":{"self":[{"href":"https:\/\/staging.elyxion.eu\/nl\/wp-json\/wp\/v2\/pages\/2661","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/staging.elyxion.eu\/nl\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/staging.elyxion.eu\/nl\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/staging.elyxion.eu\/nl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/staging.elyxion.eu\/nl\/wp-json\/wp\/v2\/comments?post=2661"}],"version-history":[{"count":20,"href":"https:\/\/staging.elyxion.eu\/nl\/wp-json\/wp\/v2\/pages\/2661\/revisions"}],"predecessor-version":[{"id":2865,"href":"https:\/\/staging.elyxion.eu\/nl\/wp-json\/wp\/v2\/pages\/2661\/revisions\/2865"}],"up":[{"embeddable":true,"href":"https:\/\/staging.elyxion.eu\/nl\/wp-json\/wp\/v2\/pages\/2548"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/staging.elyxion.eu\/nl\/wp-json\/wp\/v2\/media\/1195"}],"wp:attachment":[{"href":"https:\/\/staging.elyxion.eu\/nl\/wp-json\/wp\/v2\/media?parent=2661"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}