Version: October 7, 2025

Data Processing Agreement (DPA)

Introduction

This Data Processing Agreement (DPA) applies to all services provided by Fixxers involving the processing of personal data on behalf of the Client, such as website hosting, IT support, and Microsoft 365 management. By accepting our quotation and general terms and conditions, you automatically agree to the contents of this Data Processing Agreement.

Article 1 – Purpose and Scope

1. This agreement applies to all personal data processing activities carried out by Fixxers on behalf of the Client, in the context of agreed services.
2. Processing activities include but are not limited to:

Hosting and technical management of websites
IT support and system administration
Delivery and management of Microsoft 365 accounts
Email and domain management

Article 2 – Roles of the Parties

1. The Client acts as the data controller under the General Data Protection Regulation (GDPR).
2. Fixxers acts as the data processor, processing personal data on behalf of the Client.

Article 3 – Processing on Instruction

1. Fixxers will only process personal data based on written or documented instructions from the Client, unless required to do so by law.
2. Fixxers will not process personal data for its own purposes.

Article 4 – Security Measures

Fixxers will implement appropriate technical and organizational measures to secure personal data against loss, unauthorized access, or unlawful processing. These measures include, but are not limited to:

Encrypted connections (SSL/TLS)
Password policies and access control
Regular software updates and system monitoring
Physical and digital access restrictions

Article 5 – Use of Sub-processors

1. Fixxers may engage sub-processors in the delivery of its services.
2. The Client gives general prior consent for the use of sub-processors.
3. Fixxers ensures that sub-processors are contractually bound to comply with the same
data protection standards as agreed in this DPA.

Article 6 – Processing Outside the EEA

1. Personal data may be processed outside the European Economic Area (EEA) by Fixxers or its sub-processors.

2. In such cases, Fixxers will ensure that appropriate safeguards are in place, such as:

Standard Contractual Clauses (SCCs) approved by the European Commission
Or compliance with an approved certification mechanism (e.g. EU-U.S. Data Privacy Framework)

Article 7 – Data Breach Notification

1. If a personal data breach occurs that may have consequences for the data subjects, Fixxers will notify the Client without undue delay.
2. The notification will include relevant details to enable the Client to comply with any obligations to inform supervisory authorities and/or affected individuals.

Article 8 – Data Subject Rights

1. If a data subject contacts Fixxers directly to exercise their rights under the GDPR (e.g., access, rectification, deletion), Fixxers will forward the request to the Client.
2. Fixxers will cooperate with the Client to facilitate the execution of such requests, where reasonable.

Article 9 – Liability

1. Fixxers is only liable for damages resulting directly from a proven breach of this agreement.
2. The liability of Fixxers is limited to the amount the Client has paid for services in the 12 months prior to the incident.

Article 10 – End of Agreement

1. Upon termination of the service relationship, Fixxers will, at the Client’s written request, return or securely delete all personal data, unless legal retention obligations apply.
2. Any costs associated with the return or deletion of data may be charged to the Client, subject to prior agreement.

Article 11 – Duration and Changes

1. This agreement remains valid for as long as Fixxers processes personal data on behalf of the Client.
2. Fixxers reserves the right to amend this agreement. Substantial changes will be communicated in advance.
3. If the Client does not accept a substantial change, the Client may terminate the cooperation as of the effective date of the change.

Questions?

If you have questions about this Data Processing Agreement or require a version addressed to your company, please contact us at info@fixxersonline.com.

This English version is provided for convenience only. In case of discrepancies, the Dutch version prevails. This agreement is governed by Dutch law.