Parties
This Data Processing Agreement ("DPA") supplements the Terms & Conditions between you (the "Controller") and OÜ EU Manuals (the "Processor").
Subject matter
The Processor processes manuals and supporting documents uploaded by the Controller solely to provide the EU Machinery Directive compliance review service.
Nature and purpose of processing
Automated text and structural analysis against Annex I §1.7.4.2; generation of gap reports and (where purchased) corrected documents.
Categories of data subjects
Usually none. You should not upload personal data unless it is needed. Where a manual, an answer or a photo does contain a person's name or image (a named author, an operator in a photo), we process it only to produce your document, on your instructions.
Sub-processors
We keep the current list, with locations, on our Sub-processors page and update it there before a new provider starts processing your data. If you want an email at least 14 days before such a change, write to privacy@eu-manuals.eu and we will add you to the notice list. You may object on reasonable grounds.
Security measures
Your data is encrypted when stored and in transit. Only authorised staff can access it, and access to your files by our staff is recorded. Your files are stored in the EU; some processing steps are carried out by the partners on our Sub-processors page under EU-approved safeguards. We review our security regularly.
Deletion
Everything in a session is deleted 30 days after the last step in that session finished. Earlier deletion is available on request via privacy@eu-manuals.eu.