Data processing agreement
Draft. To be aligned with the accountant and a lawyer.
This data processing agreement is part of the terms of service and applies to every organization using Ventiqa.
- Roles. The organizer is the controller for buyer and visitor data. Ventiqa is the processor.
- Purpose. Ventiqa processes the data only to deliver the service: selling, delivering, scanning and refunding tickets, and reporting to the organizer.
- Sub-processors. Mollie, the hosting partner (EU) and the mail provider. Ventiqa announces changes thirty days in advance.
- Security. Encrypted connections, encrypted storage of secrets, role-based access, daily backups.
- Breaches. Ventiqa reports a data breach to the organizer within 48 hours.
- End. On termination the organizer can export its data; afterwards Ventiqa deletes it within the legal retention periods.