{"id":3781,"date":"2026-07-30T14:28:32","date_gmt":"2026-07-30T14:28:32","guid":{"rendered":"https:\/\/veerhost.com\/?page_id=3781"},"modified":"2026-07-30T14:42:43","modified_gmt":"2026-07-30T14:42:43","slug":"data-processing-agreement-dpa","status":"publish","type":"page","link":"https:\/\/veerhost.com\/de\/data-processing-agreement-dpa\/","title":{"rendered":"Data Processing Agreement (DPA)"},"content":{"rendered":"<div data-elementor-type=\"wp-page\" data-elementor-id=\"3781\" class=\"elementor elementor-3781\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9e4750b e-flex e-con-boxed e-con e-parent\" data-id=\"9e4750b\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-7190733 elementor-widget__width-inherit elementor-widget elementor-widget-heading\" data-id=\"7190733\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Data Processing Agreement (DPA)<\/h2>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-01e2bda e-flex e-con-boxed e-con e-parent\" data-id=\"01e2bda\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-f9b9d6a e-con-full e-flex e-con e-child\" data-id=\"f9b9d6a\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-ebccb22 e-con-full e-flex e-con e-child\" data-id=\"ebccb22\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6cdd88f elementor-widget elementor-widget-heading\" data-id=\"6cdd88f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Legal Documents<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-758824d elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"758824d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/veerhost.com\/de\/privacy-policy\/\">\n\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Privacy Policy<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/veerhost.com\/de\/terms-of-service\/\">\n\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Terms of Service<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/veerhost.com\/de\/cookie-policy\/\">\n\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Cookie Policy<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/veerhost.com\/de\/gdpr\/\">\n\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">GDPR Compliance<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/veerhost.com\/de\/data-processing-agreement-dpa\/\" target=\"_blank\">\n\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Data Processing Agreement (DPA)<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/veerhost.com\/de\/refund-billing-policy\/\">\n\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Refund &amp; Billing Policy<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/veerhost.com\/de\/server-maintenance-policy\/\">\n\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Server Maintenance Policy<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/www.icann.org\/en\/contracted-parties\/accredited-registrars\/registrar-accreditation-agreement\/registrant-rights-and-responsibilities-under-the-2009-registrar-accreditation-agreement-27-06-2011-en\" target=\"_blank\" rel=\"noopener\">\n\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Registrants Rights &amp; Responsibilities<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/veerhost.com\/de\/accessibility-statement\/\">\n\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Accessibility Statement<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-ab6b04e e-con-full e-flex e-con e-child\" data-id=\"ab6b04e\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6fc168d elementor-widget-tablet__width-initial elementor-widget__width-initial elementor-widget-mobile__width-inherit elementor-widget elementor-widget-text-editor\" data-id=\"6fc168d\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation_delay&quot;:750}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h3>Data Processing Agreement (DPA)<\/h3><p>This Data Processing Agreement (&#8220;<strong>DPA<\/strong>&#8220;) forms part of the Terms of Service between <strong>VeerHost<\/strong> (&#8220;<strong>Processor<\/strong>&#8220;, &#8220;<strong>we<\/strong>&#8220;, &#8220;<strong>our<\/strong>&#8220;, or &#8220;<strong>us<\/strong>&#8220;) and the customer purchasing or using VeerHost services (&#8220;<strong>Controller<\/strong>&#8220;, &#8220;<strong>Customer<\/strong>&#8220;, or &#8220;<strong>you<\/strong>&#8220;).<\/p><p>This DPA governs the processing of Personal Data by VeerHost on behalf of the Customer in accordance with Article 28 of the General Data Protection Regulation (EU) 2016\/679 (&#8220;GDPR&#8221;), the UK GDPR where applicable, and other applicable data protection laws.<\/p><p>By using VeerHost services, the Customer agrees to the terms of this DPA.<\/p><h3>1. Purpose<\/h3><p>The purpose of this DPA is to define the obligations and responsibilities of both parties regarding the processing of Personal Data while VeerHost provides hosting and related services.<\/p><p>This Agreement applies whenever VeerHost processes Personal Data on behalf of a Customer in connection with:<\/p><ul><li><p>Shared Hosting<\/p><\/li><li><p>WordPress Hosting<\/p><\/li><li><p>VPS Hosting<\/p><\/li><li><p>Cloud Hosting<\/p><\/li><li><p>Reseller Hosting<\/p><\/li><li><p>Domain-related services<\/p><\/li><li><p>Email hosting<\/p><\/li><li><p>Backup services<\/p><\/li><li><p>Website migration services<\/p><\/li><li><p>Technical support<\/p><\/li><li><p>Any additional services where Personal Data is processed on behalf of the Customer.<\/p><\/li><\/ul><h3>2. Definitions<\/h3><p>For the purposes of this Agreement:<\/p><p><strong>Personal Data<\/strong> means any information relating to an identified or identifiable natural person.<\/p><p><strong>Processing<\/strong> means any operation performed on Personal Data including collection, storage, organization, transmission, retrieval, deletion, or destruction.<\/p><p><strong>Controller<\/strong> means the Customer who determines the purposes and means of processing Personal Data.<\/p><p><strong>Processor<\/strong> means VeerHost, acting on behalf of the Controller.<\/p><p><strong>Subprocessor<\/strong> means any third party engaged by VeerHost to process Personal Data in connection with providing the Services.<\/p><p><strong>Applicable Data Protection Law<\/strong> means the GDPR, UK GDPR, and any applicable privacy legislation governing the processing of Personal Data.<\/p><h3>3. Scope of Processing<\/h3><p>VeerHost processes Personal Data solely for the purpose of providing the Services requested by the Customer.<\/p><p>Processing activities may include:<\/p><ul><li><p>Hosting websites and applications<\/p><\/li><li><p>Storing databases<\/p><\/li><li><p>Delivering email services<\/p><\/li><li><p>Maintaining server infrastructure<\/p><\/li><li><p>Creating backups<\/p><\/li><li><p>Restoring customer data<\/p><\/li><li><p>Monitoring system performance<\/p><\/li><li><p>Providing technical support<\/p><\/li><li><p>Troubleshooting service issues<\/p><\/li><li><p>Maintaining platform security<\/p><\/li><li><p>Detecting abuse, fraud, or malicious activity<\/p><\/li><\/ul><p>VeerHost does not determine the purposes for which Customer Personal Data is collected or used. Those decisions remain solely with the Customer.<\/p><h3>4. Categories of Data<\/h3><p>Depending on how the Services are used, Personal Data processed by VeerHost may include:<\/p><ul><li><p>Names<\/p><\/li><li><p>Email addresses<\/p><\/li><li><p>Phone numbers<\/p><\/li><li><p>Postal addresses<\/p><\/li><li><p>IP addresses<\/p><\/li><li><p>User account information<\/p><\/li><li><p>Website content<\/p><\/li><li><p>Uploaded files<\/p><\/li><li><p>Databases<\/p><\/li><li><p>Authentication records<\/p><\/li><li><p>Application logs<\/p><\/li><li><p>Customer support communications<\/p><\/li><li><p>Business records<\/p><\/li><li><p>Customer-generated content<\/p><\/li><\/ul><p>The exact categories of Personal Data processed are determined by the Customer.<\/p><h3>5. Categories of Data Subjects<\/h3><p>Data subjects may include:<\/p><ul><li><p>Website visitors<\/p><\/li><li><p>Customers<\/p><\/li><li><p>Employees<\/p><\/li><li><p>Contractors<\/p><\/li><li><p>Subscribers<\/p><\/li><li><p>Business contacts<\/p><\/li><li><p>End users<\/p><\/li><li><p>Members<\/p><\/li><li><p>Clients of the Customer<\/p><\/li><li><p>Other individuals whose Personal Data is submitted to the Services by the Customer.<\/p><\/li><\/ul><h3>6. Instructions from the Customer<\/h3><p>VeerHost shall process Personal Data only on documented instructions from the Customer unless required to do otherwise by applicable law.<\/p><p>The Customer is responsible for ensuring that all Personal Data submitted to VeerHost has been collected and processed lawfully.<\/p><p>The Customer remains responsible for determining:<\/p><ul><li><p>The legal basis for processing<\/p><\/li><li><p>Data retention periods<\/p><\/li><li><p>Privacy notices<\/p><\/li><li><p>Cookie compliance<\/p><\/li><li><p>Responding to data subject requests<\/p><\/li><li><p>Compliance with applicable privacy laws<\/p><\/li><\/ul><h3>7. Confidentiality<\/h3><p>VeerHost ensures that all personnel authorized to process Personal Data are bound by confidentiality obligations.<\/p><p>Access to Personal Data is limited strictly to personnel who require access to perform their assigned duties.<\/p><p>VeerHost maintains internal policies governing:<\/p><ul><li><p>Employee confidentiality<\/p><\/li><li><p>Access management<\/p><\/li><li><p>Security awareness<\/p><\/li><li><p>Information handling<\/p><\/li><li><p>Incident reporting<\/p><\/li><\/ul><h3>8. Security Measures<\/h3><p>VeerHost implements appropriate technical and organizational measures designed to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access.<\/p><p>These measures include, where applicable:<\/p><ul><li><p>Encryption of data in transit using modern TLS protocols<\/p><\/li><li><p>Encrypted administrative connections<\/p><\/li><li><p>Network firewalls<\/p><\/li><li><p>DDoS mitigation<\/p><\/li><li><p>Infrastructure monitoring<\/p><\/li><li><p>Intrusion detection and prevention measures<\/p><\/li><li><p>Malware detection<\/p><\/li><li><p>Server hardening<\/p><\/li><li><p>Access control based on the principle of least privilege<\/p><\/li><li><p>Strong authentication mechanisms<\/p><\/li><li><p>Security logging<\/p><\/li><li><p>Vulnerability management<\/p><\/li><li><p>Timely security updates<\/p><\/li><li><p>Backup procedures<\/p><\/li><li><p>Disaster recovery planning<\/p><\/li><li><p>Physical security controls provided by data center operators<\/p><\/li><\/ul><p>VeerHost regularly reviews and improves its security practices to address evolving threats and industry best practices.<\/p><h3>9. Subprocessors<\/h3><p>The Customer authorizes VeerHost to engage carefully selected Subprocessors where necessary to deliver the Services.<\/p><p>Subprocessors may include providers of:<\/p><ul><li><p>Cloud infrastructure<\/p><\/li><li><p>Data center facilities<\/p><\/li><li><p>Payment processing<\/p><\/li><li><p>Email delivery<\/p><\/li><li><p>Domain registration<\/p><\/li><li><p>DNS services<\/p><\/li><li><p>Monitoring and observability<\/p><\/li><li><p>Security services<\/p><\/li><li><p>Customer support platforms<\/p><\/li><\/ul><p>VeerHost requires its Subprocessors to maintain appropriate security measures and contractual obligations consistent with applicable data protection laws.<\/p><p>VeerHost remains responsible for the performance of its Subprocessors in accordance with applicable law.<\/p><h3>10. International Data Transfers<\/h3><p>VeerHost operates infrastructure in multiple geographic regions.<\/p><p>Where Personal Data is transferred outside the European Economic Area (EEA), the United Kingdom, or Switzerland, VeerHost implements appropriate safeguards as required by applicable data protection law.<\/p><p>Such safeguards may include:<\/p><ul><li><p>Standard Contractual Clauses (SCCs)<\/p><\/li><li><p>Adequacy decisions issued by competent authorities<\/p><\/li><li><p>Other legally recognized transfer mechanisms<\/p><\/li><\/ul><h3>11. Assistance with Data Subject Requests<\/h3><p>Where technically feasible, VeerHost shall assist the Customer in responding to requests from data subjects, including requests relating to:<\/p><ul><li><p>Access<\/p><\/li><li><p>Rectification<\/p><\/li><li><p>Erasure<\/p><\/li><li><p>Restriction of processing<\/p><\/li><li><p>Data portability<\/p><\/li><li><p>Objection to processing<\/p><\/li><\/ul><p>The Customer remains responsible for determining whether such requests should be fulfilled.<\/p><h3>12. Security Incident and Breach Notification<\/h3><p>VeerHost maintains documented procedures for identifying, investigating, and responding to security incidents.<\/p><p>Where VeerHost becomes aware of a Personal Data Breach affecting Customer Personal Data, VeerHost shall notify the Customer without undue delay after confirming the breach and gathering sufficient information to provide a meaningful notification.<\/p><p>Where possible, the notification will include:<\/p><ul><li><p>Nature of the incident<\/p><\/li><li><p>Categories of affected data<\/p><\/li><li><p>Likely consequences<\/p><\/li><li><p>Measures taken or proposed<\/p><\/li><li><p>Contact information for further communication<\/p><\/li><\/ul><h3>13. Assistance with Compliance<\/h3><p>Taking into account the nature of the processing and the information available, VeerHost shall provide reasonable assistance to the Customer regarding:<\/p><ul><li><p>Data protection impact assessments<\/p><\/li><li><p>Security obligations<\/p><\/li><li><p>Breach response<\/p><\/li><li><p>Regulatory compliance<\/p><\/li><li><p>Supervisory authority inquiries<\/p><\/li><\/ul><h3>14. Audit Rights<\/h3><p>Where required by applicable law, the Customer may request reasonable information demonstrating VeerHost&#8217;s compliance with this DPA.<\/p><p>Any audit request must:<\/p><ul><li><p>Be reasonable in scope<\/p><\/li><li><p>Minimize operational disruption<\/p><\/li><li><p>Protect the confidentiality of other customers<\/p><\/li><li><p>Be subject to appropriate confidentiality obligations<\/p><\/li><\/ul><p>VeerHost may satisfy audit requests through documentation, certifications, questionnaires, or other appropriate evidence where suitable.<\/p><h3>15. Data Retention and Deletion<\/h3><p>Upon termination of the Services, and subject to applicable law and any agreed retention periods, VeerHost shall delete or return Customer Personal Data where technically feasible and in accordance with its operational procedures.<\/p><p>Certain information may be retained where necessary to:<\/p><ul><li><p>Comply with legal obligations<\/p><\/li><li><p>Resolve disputes<\/p><\/li><li><p>Enforce contractual rights<\/p><\/li><li><p>Maintain security records<\/p><\/li><li><p>Prevent fraud<\/p><\/li><\/ul><h3>16. Customer Responsibilities<\/h3><p>The Customer is responsible for:<\/p><ul><li><p>Ensuring a lawful basis for processing Personal Data.<\/p><\/li><li><p>Providing appropriate privacy notices to data subjects.<\/p><\/li><li><p>Obtaining any required consents.<\/p><\/li><li><p>Configuring and using the Services in a compliant manner.<\/p><\/li><li><p>Maintaining the security of Customer credentials.<\/p><\/li><li><p>Managing content uploaded to the Services.<\/p><\/li><li><p>Responding to requests from data subjects.<\/p><\/li><\/ul><h3>17. Liability<\/h3><p>Each party shall remain responsible for its own compliance with applicable data protection laws.<\/p><p>Nothing in this DPA limits or excludes liability where such limitation is prohibited by applicable law or by the Terms of Service.<\/p><h3>18. Governing Agreement<\/h3><p>This DPA forms part of the VeerHost Terms of Service.<\/p><p>If there is any conflict between this DPA and the Terms of Service regarding the processing of Personal Data, the provisions of this DPA shall prevail to the extent of that conflict.<\/p><h3>19. Changes to This Agreement<\/h3><p>VeerHost may update this DPA from time to time to reflect changes in applicable law, regulatory guidance, security practices, or the Services.<\/p><p>Material changes will become effective upon publication or as otherwise communicated to Customers.<\/p><h3>20. Contact Information<\/h3><p>For questions regarding this Data Processing Agreement or VeerHost&#8217;s privacy practices, please contact:<\/p><p><strong>VeerHost<\/strong><\/p><p>Privacy Team<\/p><p>Email: <strong><a href=\"mailto:hello@veerhost.com\">hello@veerhost.com<\/a><\/strong><\/p><p>Support: <strong><a href=\"mailto:support@veerhost.com\">support@veerhost.com<\/a><\/strong><\/p><p>Website: <strong><a href=\"https:\/\/veerhost.com\/de\/\">https:\/\/veerhost.com<\/a><\/strong><\/p><p>VeerHost is committed to protecting Personal Data and maintaining compliance with applicable data protection laws while providing secure, reliable, and privacy-focused hosting services.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Data Processing Agreement (DPA) Legal Documents Privacy Policy Terms of Service Cookie Policy GDPR Compliance Data Processing Agreement (DPA) Refund &amp; Billing [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-3781","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/veerhost.com\/de\/wp-json\/wp\/v2\/pages\/3781","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/veerhost.com\/de\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/veerhost.com\/de\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/veerhost.com\/de\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/veerhost.com\/de\/wp-json\/wp\/v2\/comments?post=3781"}],"version-history":[{"count":7,"href":"https:\/\/veerhost.com\/de\/wp-json\/wp\/v2\/pages\/3781\/revisions"}],"predecessor-version":[{"id":3797,"href":"https:\/\/veerhost.com\/de\/wp-json\/wp\/v2\/pages\/3781\/revisions\/3797"}],"wp:attachment":[{"href":"https:\/\/veerhost.com\/de\/wp-json\/wp\/v2\/media?parent=3781"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}