Enterprise legal
Data Processing Agreement (DPA)
Last updated: June 2026 · B2B template
This Data Processing Agreement template applies when ZRG Mineral processes personal data on behalf of the customer under GDPR Art. 28. Request a countersigned PDF via info@zrgmineral.com for your procurement or legal review.
1. Subject matter and duration
Processing of personal data contained in supplier documents, user accounts, audit trails and alert configurations for the term of the ZRG platform subscription and until deletion per the retention schedule.
2. Nature and purpose
Operation of the ZRG Risk Terminal: portfolio analytics, compliance document validation, predictive risk alerts, audit trail export and ERP JSON integration.
3. Categories of data subjects
Customer employees (users), customer supplier contacts (where contained in uploaded documents), billing contacts.
4. Processor obligations
ZRG processes data only on documented instructions, ensures confidentiality, implements appropriate technical and organisational measures (see Security Overview), assists with data subject requests, notifies breaches without undue delay, and deletes or returns data after contract end.
5. Sub-processors
Customer authorises the sub-processors listed at /enterprise/subprocessors. ZRG will notify material changes with 30 days' notice.
6. International transfers
Where sub-processors are located outside the EEA, transfers rely on EU Standard Contractual Clauses and supplementary measures documented in the security dossier.
Template for B2B negotiations — not legal advice. Governing terms remain the ZRG Terms of Service unless separately agreed in writing.