Data Processing Agreement (DPA)

This agreement is between:

Señor Programador (processor)
and
The client (controller)

1. Subject

Processor provides a CMS service that may process personal data on behalf of the client.

2. Purpose of processing

Hosting and technically facilitating websites through the CMS.

3. Duration

This agreement is valid as long as the CMS service is active.

4. Obligations of the processor

• Process personal data only on instructions from the client
• Implement appropriate security measures
• Ensure confidentiality
• No resale of data

5. Subprocessors

Hosting is provided via Hetzner Online GmbH (Germany).

6. Security

• SSL encryption
• Secure server environment
• Access control
• Backups

7. Data breaches

Processor will inform the client without undue delay upon discovery of a data breach.

8. Termination

Upon termination, data will be deleted or returned unless legal obligations require otherwise.