Data Processing Agreement.

Data Processing Agreement (DPA)

Last modified: 10 June 2026

This is our standard template. Where we process personal data on your behalf in delivering a service, this data processing agreement applies and is confirmed or signed per engagement. It supplements our terms and conditions and prevails over them with respect to the processing of personal data.

1. Roles

The Client is the controller and MBWorkers is the processor. MBWorkers processes personal data solely on the instructions of, and on behalf of, the Client.

2. Subject matter, duration and purpose

The processing concerns the personal data the Client provides or makes accessible, for the purpose of delivering the agreed services, for the duration of the engagement. The nature and purpose follow from the engagement.

3. MBWorkers' obligations

  • Processes data only on the documented instructions of the Client.
  • Ensures persons with access are bound to confidentiality.
  • Implements appropriate technical and organisational security measures (Art. 32 GDPR).
  • Assists the Client with data-subject requests and with security and impact assessments.
  • Notifies the Client of a data breach without undue delay after becoming aware of it.
  • Deletes or returns the personal data at the end, at the Client's choice, unless retention is legally required.
  • Makes available the information needed to demonstrate compliance and cooperates with reasonable audits.

4. Subprocessors

The Client gives general authorisation for engaging subprocessors needed to deliver the service, including hosting, tooling and AI providers (e.g. OpenAI, Anthropic). MBWorkers imposes equivalent obligations on these subprocessors and remains responsible for their compliance. A current list is available on request; for changes affecting the Client we inform in advance and the Client may object.

5. Transfers outside the EEA

Where transfers outside the European Economic Area occur, we ensure a valid transfer basis, such as the Standard Contractual Clauses (SCCs).

6. Liability

Liability under this data processing agreement is limited as set out in our terms and conditions.

7. Contact

For privacy and processing questions: MBWorkers Vof, info@mbworkers.com. A signable version is available on request.