Data Processing Agreement
Accept the Data Processing Agreement
Data Processing Agreement
A Data Processing Agreement (DPA) is a legally binding contract between you (the data controller) and Mailnaptic (the data processor) that governs how personal data is handled. Under GDPR Article 28, a DPA is mandatory whenever you use a third-party service to process personal data of EU individuals.
Why You Need a DPA
When you use Mailnaptic to send emails, manage contacts, and track engagement, Mailnaptic processes personal data on your behalf. The DPA establishes:
- The subject matter and duration of the processing.
- The nature and purpose of the processing (email marketing, contact management, analytics).
- The types of personal data processed (names, email addresses, engagement data, behavioral data).
- The categories of data subjects (your contacts and subscribers).
- Your obligations and rights as the data controller.
- Mailnaptic's obligations as the data processor.
Key Provisions
Mailnaptic's DPA includes the following key commitments:
- Processing only on your instructions: Mailnaptic processes personal data only as instructed by you and only for the purposes of providing the email marketing service.
- Confidentiality: All personnel who process personal data are bound by confidentiality obligations.
- Security measures: Mailnaptic implements appropriate technical and organizational measures to protect personal data, including encryption in transit and at rest, access controls, and regular security assessments.
- Sub-processors: Mailnaptic maintains a list of sub-processors (infrastructure providers, delivery partners) and notifies you of any changes, giving you the opportunity to object.
- Breach notification: Mailnaptic will notify you without undue delay upon becoming aware of a personal data breach.
- Deletion or return: Upon termination of the service, Mailnaptic will delete or return all personal data at your choice.
- Audit rights: You have the right to audit Mailnaptic's compliance with the DPA, either directly or through an appointed auditor.
How to Accept the DPA
- Navigate to Organization → Compliance Settings.
- Locate the Data Processing Agreement section.
- Click View DPA to read the full agreement.
- After reviewing, click Accept DPA. This records your acceptance with a timestamp in your organization record (
dpa_accepted_at). - You can download a PDF copy of the signed DPA for your records at any time.
Who Should Accept
The DPA should be accepted by someone authorized to enter into legal agreements on behalf of your organization — typically the account owner or a designated privacy officer. The acceptance is logged in the audit trail with the admin's name and timestamp.