[Example: Create your own version and remove this note and the footer before using]

DPA Cover Page
for Bonterms Data Protection Addendum v.2

By executing this DPA Cover Page, Customer and Provider enter into the Bonterms Data Protection Addendum Version 2.0 (DPA) (available at https://bonterms.com/standard/dpa-v2-cover-page-version) by this reference. A reference copy may be attached. The DPA includes the contents of this DPA Cover Page, including the Key Terms, Processing Details and any Additional Terms set forth below. Capitalized terms not defined in this DPA Cover Page have the meanings given in the DPA.
Key Terms
Main Agreement This DPA is incorporated into the Main Agreement between Customer and Provider identified below:
[Include name and date of Main Agreement between Customer and Provider]
DPA Effective Date [Fill in date]
Subprocessor List [Attach or link to location of Provider's Subprocessor List (or state "None")]
Designated EU Governing Law [EU member state law governing the EU SCCs, or "N/A" if Exhibit A does not apply]
Designated EU Member State [EU member state whose courts will resolve disputes under the EU SCCs, or "N/A" if Exhibit A does not apply]
Processing Details
Subject Matter and Details of Processing
Customer/ 'Data Exporter' Details
Name: See signature block below.
Contact details for data protection:
Main address:
Customer activities:
Role: Controller
Provider/ 'Data Importer' Details
Name: See signature block below.
Contact details for data protection:
Main address:
Provider activities:
Role: Processor
Details of Processing
Categories of Data Subjects:

[Uncheck any boxes that do not apply. List additional categories of data subjects or add any additional detail as necessary. This list is not necessarily exhaustive.]

The following, as applicable under the circumstances:

Customer's customers

Customer's prospective customers

Customer's business contacts

Users

Employees, other personnel and job candidates

Other: [specify]

Categories of Customer Personal Data:

[Uncheck any boxes that do not apply. List additional categories of personal data or add any additional detail as necessary. This list is not necessarily exhaustive.]

The following, as applicable under the circumstances:

Contact information

Account information

Demographic information

Professional information

Transaction information

Communications information

User generated content

Unique identifiers

Other: [specify other categories]

For Sensitive or Special Categories of Personal Data, see immediately below.

Sensitive or Special Categories of Personal Data:

[Check applicable box]

Yes, sensitive or special categories of Personal Data: [specify categories]

If Yes, additional restrictions on Processing: [specify restrictions]

None/Not Applicable

Frequency of transfer:

[Check applicable box]

Continuous

Other: [specify]

Nature of the Processing: Processing operations required to provide the Service in accordance with the Main Agreement.
Purpose of the Processing: To provide the Service and carry out Customer Instructions.
Duration of Processing / retention period: Concurrent with the term of the Main Agreement and thereafter pursuant to Section 8 (Data Return or Deletion) of the DPA.
Transfers to Subprocessors: As described in the Subprocessor List for the purposes described therein.
Competent EU Supervisory Authority:

If the EU SCCs apply, check one:

The following supervisory authority: [specify]

As determined in accordance with Clause 13 of the EU SCCs

Security Measures
Technical and Organizational Measures [If Security Measures are not described in the Main Agreement, describe or link to Provider's technical and organizational measures here. If addressed in the Main Agreement, state "See Main Agreement."]
Additional Terms
The following additions to or modifications of the Bonterms Data Protection Addendum (including any Exhibits) are agreed by the parties and control in the event of any conflicts:

Signatures
Agreed to as of the DPA Effective Date by each party's authorized representative:
Customer:


Signature:

Name and Title:

Company:

Date:

Provider:


Signature:

Name and Title:

Company:

Date: