← Back to legal documents

Legal

Data Processing Agreement (GDPR/DPA)

PLACEHOLDER — pending legal review

These documents are in preparation and will be published after review by a Romanian lawyer. They are not yet in force.

Controller and processor roles, technical measures (zero-knowledge), processing location (EU/RO, pidginhost.com), and deletion procedures.

Contents

  • Roles of the parties: controller and processor / sub-processor.
  • Subject matter, duration, and nature of the processing.
  • Technical and organisational measures: open-source client and zero-knowledge content encryption before upload.
  • Processing and storage location: EU / Romania, at pidginhost.com.
  • Deletion procedures and demonstrable erasure (deleting wrapped keys).
  • Security-incident notification and assistance with data-subject rights.