ventiqa

Data processing agreement

Draft. To be aligned with the accountant and a lawyer.

This data processing agreement is part of the terms of service and applies to every organization using Ventiqa.

  1. Roles. The organizer is the controller for buyer and visitor data. Ventiqa is the processor.
  2. Purpose. Ventiqa processes the data only to deliver the service: selling, delivering, scanning and refunding tickets, and reporting to the organizer.
  3. Sub-processors. Mollie, the hosting partner (EU) and the mail provider. Ventiqa announces changes thirty days in advance.
  4. Security. Encrypted connections, encrypted storage of secrets, role-based access, daily backups.
  5. Breaches. Ventiqa reports a data breach to the organizer within 48 hours.
  6. End. On termination the organizer can export its data; afterwards Ventiqa deletes it within the legal retention periods.