Data Processing Agreement

Who does what

You are the controller. You decide what to upload, why, and what to do with the results. That includes deciding whether a drawing containing someone's name or address should be uploaded at all.

We are the processor, for the content you put into the Service: your drawing files, the measurements taken from them, and your exports. We act on your instructions and nothing else.

What we process, and why

Purpose. To provide measure.expert: storing the drawings you upload, running automatic scans over the sheets you select, letting you measure and correct them, and producing your exports.

Duration. For as long as your subscription runs, plus the deletion period below.

Categories of data subject

• The people on your team who use the Service
• People who happen to appear in the drawings you upload — architects, your own clients, site contacts named in title blocks or annotations

Types of personal data

• Whatever appears inside your drawing files: names, addresses, project references, annotations, revision histories
• Measurements and exports derived from those files

Our obligations

1. We act only on your instructions. Your instructions are: our Terms, this agreement, and whatever you do in the Service itself. If you want us to do something else with your data, put it in writing and we'll tell you whether we can.
2. If we think an instruction breaks the law, we'll say so before acting on it — as Article 28(3)(h) requires.
3. Everyone who touches your data is bound to confidentiality, in writing, and stays bound after they stop working with us.
4. We keep your data secure using the measures in Annex B. Those are real measures, not aspirations — if something in Annex B stops being true, we update it.
5. We help you answer data subject requests. If someone asks you for access, correction, deletion or portability of data sitting in your account, and you need us to act on it, we'll help within a reasonable time. Most of it you can do yourself in the Service.
6. We help you meet your own obligations under GDPR Articles 32 to 36 — security, breach notification, and data protection impact assessments — as far as the information is ours to give.
7. We tell you about breaches without undue delay once we become aware of one, with what we know at the time: what happened, which data and roughly how many people are affected, what we're doing about it, and who to contact. We don't wait until we have the full picture to make the first call.
8. We delete your data when you're done. See "Deletion" below.
9. We show our work. We'll give you the information you need to verify we're meeting this agreement — see "Audits" below.

Sub-processors

You give us general authorisation to use sub-processors. The current list is in Annex C.

1. Every sub-processor is bound by written terms at least as protective as this agreement.
2. We stay fully responsible for what they do. If a sub-processor causes a problem, that's ours to answer for, not something we point at them for.
3. We'll tell you 30 days before adding or replacing one. If you object on reasonable data protection grounds within those 30 days, we'll try to find a workable alternative. If we can't, you can terminate the affected part of your subscription without penalty for the remaining term.
4. Emergency replacements — where a sub-processor fails or has to be dropped for security reasons — may happen faster. We'll tell you as soon as we can.

Where your data is processed

Your drawings, measurements and exports are processed in the European Economic Area. Hosting, authentication, transactional email and our auto-scan engine all run in the same EU region.

If that ever changes and personal data has to go outside the EEA, we'll rely on a European Commission adequacy decision where one covers the destination, and where none does, on the Standard Contractual Clauses together with a transfer impact assessment and whatever technical measures it identifies. We'll update Annex C before that happens, not after.

Our group. Colleagues at other companies in our group (defined in the Terms) may access your data where a task requires it — support escalation, development, administration. Every current group entity is in the EEA or a country with an adequacy decision; the list is in Annex C.

Audits

1. First stop is documentation. We'll provide the information needed to demonstrate compliance with this agreement — Annex B, our sub-processor terms, and answers to reasonable written questions.
2. If that isn't enough, you can audit. Once per calendar year, on 30 days' written notice, during business hours, in a way that doesn't disrupt the Service. More often if a supervisory authority requires it or if there's been a breach affecting your data.
3. Audits are at your cost, and anyone conducting one must be bound by confidentiality and can't be a competitor of ours.
4. We'll cooperate properly with these. We're a small team, and the practical limits above exist so audits stay workable — not to avoid scrutiny.

Deletion

When your subscription ends, your access stops immediately and we delete your data from our systems within 60 days, in line with the Terms.

Where the law requires us to keep something, we keep only that, only for as long as required, and it stays protected by this agreement while we hold it.

If you want your data returned in a specific format rather than just exported through the Service, ask before your subscription ends — we can't retrieve it afterwards.

Your obligations

1. You warrant you have a lawful basis for the personal data you upload, and that you're allowed to give it to us to process.
2. You're responsible for what's in your files. If a drawing contains someone's name or address that doesn't need to be there, strip it before uploading — we'd rather not hold it.
3. You give your own people the privacy information they're entitled to. We don't have a direct relationship with the individuals named inside your drawings, so we can't do this for you.
4. Your instructions must be lawful. If they aren't, we won't act on them.

Liability and term

1. Liability under this agreement is subject to the cap in our Terms. This agreement doesn't create a separate or additional pool of liability.
2. This agreement runs as long as we process personal data for you, and its confidentiality and deletion obligations outlast it.
3. If this agreement and the Terms conflict on data protection, this agreement wins. On anything else, the Terms win.
4. Dutch law applies, and disputes go to the courts of Amsterdam — same as the Terms.