yoursprints
Back to home

Data Processing Agreement

Version 1.0 · June 2026

This data processing agreement applies when a Maker processes personal data of their own clients or customers via yoursprints.com. In that situation yoursprints.com acts as processor within the meaning of the GDPR and the Maker is the data controller.

Processor: Peter de Vroed trading as yoursprints.com, Individual Entrepreneur, GeorgiaData Controller: The Maker as registered on yoursprints.comEU Representative of Processor: Anke Verhagen, OpeningUp, the Netherlands

Article 1 · Subject matter and purpose

  1. The Maker uses yoursprints.com to offer Sprints to their own clients. In that context yoursprints.com processes personal data of those clients on behalf of the Maker.
  2. yoursprints.com processes the personal data solely on the instruction of the Maker and for the purposes described in this agreement.

Article 2 · Nature of the processing

  1. The processing includes: storage of the name and email address of the Maker’s clients, registration of Sprint progress, sending of daily push notifications and certificate issuance.
  2. The categories of data subjects are: clients and participants of the Maker.
  3. For Measurement Sprints the processing also includes special categories of personal data relating to health. The additional provisions in Article 7 apply.

Article 3 · Obligations of yoursprints.com as processor

  1. yoursprints.com processes personal data solely on documented instruction from the Maker.
  2. yoursprints.com implements appropriate technical and organizational measures to secure the personal data.
  3. yoursprints.com informs the Maker without delay if in its opinion an instruction violates the GDPR or other privacy legislation.
  4. yoursprints.com only allows persons who have committed to confidentiality to process the personal data.
  5. yoursprints.com provides the Maker all cooperation necessary to comply with requests from data subjects to exercise their rights.

Article 4 · Sub-processors

  1. yoursprints.com uses the following sub-processors: Anthropic (Sprint Builder), Stripe (payment processing), Hetzner (server hosting EU).
  2. yoursprints.com imposes the same obligations on sub-processors as are laid down in this agreement.
  3. yoursprints.com informs the Maker of changes to sub-processors. The Maker has the right to object within 14 days.

Article 5 · Security

  1. yoursprints.com implements appropriate technical and organizational measures including: encryption of data storage and transport, access security based on the need-to-know principle, regular backups on EU servers and monitoring of security incidents.
  2. In the event of a data breach that may affect the rights and freedoms of data subjects, yoursprints.com notifies the Maker as soon as possible and in any case within 48 hours.

Article 6 · International transfers

  1. Transfer of personal data outside the EEA takes place exclusively on the basis of Standard Contractual Clauses (SCCs) or another lawful basis recognized by the GDPR.

Article 7 · Additional provisions for Measurement Sprints

  1. The following additional safeguards apply to the processing of health data in the context of Measurement Sprints.
  2. Processing takes place exclusively on the basis of explicit consent from the data subject pursuant to Article 9(2)(a) GDPR.
  3. Measurement data is not shared in identified form with the Maker. The Maker receives only anonymized group results if data subjects have given separate consent for this.
  4. Measurement data is retained for a maximum of 12 months after completion of the Measurement Sprint unless the data subject has consented to longer retention.

Article 8 · Retention and deletion

  1. After the end of the data processing agreement yoursprints.com deletes all personal data of the Maker unless statutory retention obligations require otherwise.
  2. The Maker may at any time request deletion of specific data.

Article 9 · Audit

  1. yoursprints.com provides the Maker on request with the information necessary to demonstrate compliance with this agreement.
  2. yoursprints.com cooperates with audits carried out by the Maker or an auditor designated by them, provided reasonably necessary and following prior written notice of at least 30 days.

yoursprints.com · peter@yoursprints.com · EU Representative: Anke Verhagen, OpeningUp, the Netherlands

Other documents