DPA / AVV

Where FOCX GmbH processes personal data on behalf of a customer, the parties execute a customer-specific Data Processing Agreement before production customer data is processed where Art. 28 GDPR applies.

The DPA documents the customer's instructions and processing purpose, confidentiality obligations, technical and organizational measures, approved subprocessors, assistance with data-subject rights, security incident cooperation, deletion/return of customer data, and the information required to demonstrate compliance.

The agreement is aligned with RUNSHIFT's actual processing model: read-only CRM source access, workspace-scoped authorization, server-side credential handling, data minimization, customer export/deletion processes and the current subprocessor register.

The public page is not a substitute for an executed customer agreement. Contact support@focx.store for onboarding documentation.