Parties
This Data Processing Agreement ("DPA") supplements the Terms & Conditions between you (the "Controller") and OÜ EU Manuals (the "Processor").
Subject matter
The Processor processes manuals and supporting documents uploaded by the Controller solely to provide the EU Machinery Directive compliance review service.
Nature and purpose of processing
Automated text and structural analysis against Annex I §1.7.4.2; generation of gap reports and (where purchased) corrected documents.
Categories of data subjects
Typically none. Controllers must not upload personal data unless strictly necessary; any incidental personal data is processed under Article 28 GDPR obligations.
Sub-processors
Processor maintains a current list of sub-processors. Controller is notified at least 14 days before any new sub-processor is engaged and may object on reasonable grounds.
Security measures
Your data is kept securely encrypted. Only authorised staff can access it, and every access is logged. Your data stays in the EU. Independently reviewed each year.
Deletion
Documents and derived outputs are deleted 30 days after run completion. Earlier deletion is available on request via privacy@eu-manuals.eu.