Data Processing Agreement
Our standardized DPA covers how we process, store, protect, and transfer your data in compliance with GDPR and global privacy regulations.
Data Processing
How We Process Your Data
As a data processor, IdeaDunes handles your data strictly according to your instructions and applicable law.
Processing Activities
We process personal data solely for providing and improving our service: hosting, analytics, communication, CRM operations, and platform maintenance as documented in our processing registry.
Security Measures
AES-256 encryption at rest, TLS 1.3 in transit, SOC 2 Type II aligned controls, regular penetration testing, and comprehensive access controls protect all processed data.
International Transfers
Cross-border data transfers rely on EU Standard Contractual Clauses (SCCs), adequacy decisions, or binding corporate rules as appropriate for each transfer scenario.
Your Rights
Controller Rights & Obligations
As the data controller, you retain full ownership and control over your data.
Data Portability
Export all your data anytime in standard formats (CSV, JSON, XML). We provide automated export tools and manual assistance for complex data structures.
Deletion & Retention
Request complete data deletion at any time. We permanently erase all data within 30 days of termination unless legally required to retain specific records.
Audit Rights
You have the right to audit our data processing activities. We participate in third-party audits and provide necessary documentation upon reasonable request.
Ready to Get Started?
Join thousands of businesses using IdeaDunes to streamline operations, grow revenue, and achieve more.
Start Free Trial Talk to Sales