Legal

Data Processing Agreement

Data processing agreement (DPA) pursuant to Article 28 GDPR. We conclude an individual DPA with every club that uses our software.

Request the standard DPA

Our template data processing agreement documents the nature and scope of the data processing, the technical and organisational measures (TOMs), sub-processors, and the rights and obligations of both parties.

Please request the current document by email at [email protected] — we will send it to you within 24 hours.

Key data of the processing

  • Controller: the club (customer)
  • Processor: WSKIDATA, Altmünster, Austria
  • Storage location: Frankfurt, Germany (EU)
  • Categories of data processed: member master data, tariff and payment information, ride records, boat data
  • Retention: for the duration of the contract; deletion in accordance with Terms §3

Technical and organisational measures

  • Encrypted transmission (TLS 1.3)
  • Encrypted database storage (AES-256)
  • Access control via role-based permissions
  • Daily backups, stored geo-redundantly
  • Logging and audit trail of all administrative access

Questions about data protection or processing? Write to us at [email protected].