If we process personal data on your behalf, the GDPR requires a written agreement between us. Here you will find all the information you need and the template to download.
What is a data processing agreement?
Under Art. 28 GDPR, a data processing agreement (in German: Auftragsverarbeitungsvertrag, AVV) is required whenever a service provider processes personal data on behalf of another company.
You as the controller
You remain the controller within the meaning of the GDPR. The data of your customers, employees and business partners belongs to you.
- You decide which data is processed
- You are the point of contact for data subject rights
- You can review the AVV at any time
- You have the right to issue instructions
We as the processor
1x1 IT-Solutions processes the data only for the agreed purposes and in accordance with your instructions.
- Processing only in our data centre in Germany
- Strict separation of data for each client
- Encrypted transmission (TLS/HTTPS)
- Daily data backup
How simple it is to conclude
The AVV needs to be concluded once at the start of the contract and only takes a few minutes.
- Download: Download the AVV as a PDF and print it out.
- Fill in: Enter your company details and the contact person on page 1.
- Sign: Sign the document on the signature page.
- Return: Send the completed document back to us by email or post.
Agreement template to download
Download the AVV as a PDF, print it out and send the completed copy back to us.
AVV as PDF
10 pages · A4 · to print and sign
Frequently asked questions
Answers to the most important questions about the data processing agreement.
Do I really need a data processing agreement?
Yes. As soon as we process personal data of your customers, employees or business partners, and that is the case with almost every one of our software solutions, Art. 28 GDPR requires a written agreement. Without an AVV, both you and we risk fines from the data protection authorities.
Do I need a separate AVV for each product?
No. Our AVV covers all software services from 1x1 IT-Solutions that you use now or in the future. You conclude the agreement once and it applies to the entire business relationship.
Which subcontractors does 1x1 IT-Solutions use?
We use the hosting services of IONOS SE (Montabaur, Germany) and dogado GmbH (Dortmund, Germany). Both providers are listed transparently in the annexes to the AVV. No data processing takes place outside the EU.
Where is my data stored?
Exclusively in German data centres of our two hosting partners. On request, we will tell you the exact locations as part of the data processing agreement.
Can I change the content of the agreement?
In principle, the AVV is designed as a balanced standard agreement. If you have special requirements, for example your own group template, please get in touch. We review every change individually.
What happens to my data when the contract ends?
When the business relationship ends, you receive a complete data export in a common format (CSV, XML, ICS, VCF). All data is then deleted in compliance with data protection rules within 30 days, unless statutory retention obligations prevent this.
What does the data processing agreement cost?
Nothing. Concluding the AVV is part of our service and is provided at no extra charge.
Standard agreement. Individual changes on request.
Questions about data protection?
If you have questions about the data processing agreement or how we handle your data, please contact us directly.