• LandEye – Data Processing Addendum (GDPR Art. 28)

1. Scope

This DPA applies where LandEye processes Personal Data on behalf of Users acting as Data Controllers.

2. Processing Activities

• Hosting and storage
• Order fulfillment
• Payment facilitation
• Security and monitoring

3. Processor Obligations

LandEye shall:

• Process data only on documented instructions
• Ensure confidentiality
• Implement appropriate security measures
• Assist with data subject requests
• Notify Controllers of data breaches

4. Sub-Processors

Sub-processors are engaged under equivalent GDPR obligations.

5. International Transfers

Transfers outside the EEA rely on Standard Contractual Clauses.

6. Audits

Controllers may audit compliance once per year with reasonable notice.

7. Termination

Upon termination, Personal Data shall be deleted or returned unless retention is legally required.

8. Governing Law

Dutch law applies. Courts of Amsterdam have exclusive jurisdiction.