Data processing agreement
Last updated: October 2026
This data processing agreement applies when an organisation (the controller) places personal data in the Workplaced platform. Workplaced acts as processor within the meaning of the GDPR.
Subject and duration
Workplaced processes personal data solely on behalf of the organisation and only to deliver the platform: configuring projects, collecting aggregated measurement results and making content available to invited users. The agreement runs for the duration of the main agreement.
Nature and purpose of processing
Processing consists of storing, displaying and processing data the organisation enters or has collected itself, such as account data of invited employees, survey responses and project data. Results are shown in the platform only in aggregated form; individual responses are not visible to the organisation.
Obligations of Workplaced
Workplaced processes personal data only on documented instruction from the organisation, ensures confidentiality, takes appropriate technical and organisational measures (see Security and compliance), notifies data breaches without undue delay and supports the organisation with data subject requests and data protection impact assessments.
Sub-processors
Workplaced engages sub-processors for hosting and infrastructure within the European Economic Area. The organisation is informed in advance of new sub-processors and may object. Workplaced remains fully liable for the performance of its sub-processors.
Transfers outside the EEA
Personal data is in principle processed within the European Economic Area. Transfers outside the EEA take place only with appropriate safeguards, such as EU standard contractual clauses.
End of the agreement
After the main agreement ends, Workplaced deletes or anonymises the personal data within a reasonable period, unless legal retention obligations require otherwise. At the organisation's request, Workplaced provides an export of the data beforehand.
Audit
The organisation has the right to have compliance verified by an independent auditor, subject to reasonable notice and confidentiality. Workplaced's ISO 27001 certification (0202968) is the starting point for this.
Questions about this document? Email customer@workplaced.com.