A data processing agreement, or DPA, is an agreement between a data controller (VTEX customers) and a data processor (VTEX). It regulates any personal data processing conducted for business purposes. A DPA may also be called a GDPR data processing agreement. The primary purpose of the DPA is to protect users’ data as per the applicable laws. In it, you will find information about:
- Personal data processing;
- Data subject rights and information;
- Sub-operators, security, personal incident management, and limitation of liability.