GDPR and data processing agreement

Do you work with your customers' personal data in SpinOffice? Then under the GDPR you are the controller and we are the processor. For this, we enter into a data processing agreement.

The data processing agreement

We have a standard data processing agreement, drawn up by Mulberry Garden B.V., the organization behind SpinOffice. You can find it on our website: Data processing agreement (in Dutch)

Questions about the agreement? Email support@spinoffice-crm.com.

What do we do for the GDPR?

• Your data is stored within the European Economic Area.
• Data is stored and sent encrypted.
• You can make two-factor authentication mandatory for your whole organization.
• With rights, you determine per user who may see and do what, and you can make items private.
• In the event of a data breach, we inform you within 24 hours. Read Data breaches

What do you do yourself?

• Determine per user which rights and contact types are needed. Read Managing users and rights
• Set up Auto-clean, so you don't keep data longer than necessary. Read Company preferences
• Don't put special categories of personal data, such as medical data, in AI prompts.

Read also: How SpinOffice handles your data