Data Processing Agreement
For enterprise customers whose internal compliance requires a signed DPA covering Flexum's data-processing role.
When you need a DPA
In most Flexum engagements we are a separate data controller — you submit a quote request and we use that contact information to respond, in accordance with our Privacy Policy. No DPA is needed in that case.
A DPA may be required when:
- Flexum technicians handle equipment that processes your customers' personal data (e.g. variable-data label runs containing personal information)
- An integration with your MIS or pre-press system requires Flexum to handle production data containing personal data
- Your internal procurement compliance mandates a signed DPA with all suppliers
Requesting a DPA
Email info@flexum.eu with subject line “DPA request”. Include your company name, the engagement scope, and any specific compliance requirements (e.g. GDPR Art. 28 standard contractual clauses, sector-specific addenda).
Our standard DPA is based on the European Commission's Standard Contractual Clauses (SCCs). We typically respond with a draft within 5 business days.
