{"id":538,"date":"2026-03-30T23:12:27","date_gmt":"2026-03-30T23:12:27","guid":{"rendered":"https:\/\/offertbox.se\/?page_id=538"},"modified":"2026-03-30T23:14:45","modified_gmt":"2026-03-30T23:14:45","slug":"data-processing-agreement-dpa","status":"publish","type":"page","link":"https:\/\/offertbox.se\/index.php\/data-processing-agreement-dpa\/","title":{"rendered":"Data processing agreement (dpa)"},"content":{"rendered":"<p><strong>Last updated:<\/strong> March 2026<\/p>\n<p>This Data Processing Agreement (\u201cDPA\u201d) forms part of the Terms of Service between:<\/p>\n<p><strong>Blixtgo Agency AB<\/strong> (org. no. 559069-9038), Drottninggatan 6A, 212 11 Malm\u00f6, Sweden<br \/>\n(\u201cProcessor\u201d or \u201cOffertBox\u201d)<\/p>\n<p>and<\/p>\n<p>The registered business using the OffertBox platform (\u201cController\u201d or \u201cCustomer\u201d).<\/p>\n<h3>1. Purpose of this Agreement<\/h3>\n<p>This DPA regulates the processing of personal data by OffertBox on behalf of the Customer in<br \/>\naccordance with:<\/p>\n<ul>\n<li>General Data Protection Regulation (GDPR)<\/li>\n<li>Applicable EU and Swedish data protection laws<\/li>\n<\/ul>\n<h3>2. Roles of the Parties<\/h3>\n<ul>\n<li>The Customer acts as Data Controller<\/li>\n<li>OffertBox acts as Data Processor<\/li>\n<\/ul>\n<p>The Customer determines the purposes and means of processing personal data.<\/p>\n<h3>3. Categories of Data Subjects<\/h3>\n<p>Personal data processed under this Agreement may include:<\/p>\n<ul>\n<li>Customers of the Customer<\/li>\n<li>Employees of the Customer<\/li>\n<li>Business contacts<\/li>\n<li>Leads and potential clients<\/li>\n<\/ul>\n<h3>4. Types of Personal Data<\/h3>\n<p>The processing may include:<\/p>\n<ul>\n<li>Names<\/li>\n<li>Email addresses<\/li>\n<li>Phone numbers<\/li>\n<li>Addresses<\/li>\n<li>Service-related data<\/li>\n<li>Booking and scheduling data<\/li>\n<li>Communication content<\/li>\n<li>Technical data (IP address, device info)<\/li>\n<\/ul>\n<h3>5. Nature and Purpose of Processing<\/h3>\n<p>OffertBox processes personal data to:<\/p>\n<ul>\n<li>Provide the SaaS platform<\/li>\n<li>Store and manage customer data<\/li>\n<li>Enable communication (email\/SMS)<\/li>\n<li>Handle leads, quotes, and bookings<\/li>\n<li>Provide analytics and reporting<\/li>\n<li>Ensure system functionality and security<\/li>\n<\/ul>\n<h3>6. Duration of Processing<\/h3>\n<p>Personal data will be processed:<\/p>\n<ul>\n<li>For as long as the Customer uses the Service<\/li>\n<li>Until deletion is requested<\/li>\n<li>Or as required by applicable law<\/li>\n<\/ul>\n<h3>7. Processor Obligations<\/h3>\n<p>OffertBox shall:<\/p>\n<ul>\n<li>Process personal data only on documented instructions from the Customer<\/li>\n<li>Ensure confidentiality of all personnel<\/li>\n<li>Implement appropriate technical and organizational measures<\/li>\n<li>Assist the Customer in fulfilling GDPR obligations<\/li>\n<li>Notify the Customer of data breaches without undue delay<\/li>\n<li>Not sell or misuse personal data<\/li>\n<\/ul>\n<h3>8. Security Measures<\/h3>\n<p>OffertBox implements appropriate safeguards, including:<\/p>\n<ul>\n<li>Secure cloud hosting via Google Cloud \/ Firebase<\/li>\n<li>Access control and authentication<\/li>\n<li>Encryption where applicable<\/li>\n<li>Monitoring and logging<\/li>\n<li>Data minimization principles<\/li>\n<\/ul>\n<h3>9. Sub-processors<\/h3>\n<p>The Customer authorizes OffertBox to use the following sub-processors:<\/p>\n<ul>\n<li>Google Cloud \/ Firebase<\/li>\n<li>Stripe<\/li>\n<li>Mailgun<\/li>\n<li>Twilio<\/li>\n<li>Google Analytics<\/li>\n<li>Meta Pixel<\/li>\n<\/ul>\n<p>OffertBox ensures that all sub-processors comply with GDPR requirements.<\/p>\n<h3>10. International Transfers<\/h3>\n<p>Where data is transferred outside the EU\/EEA, OffertBox ensures appropriate safeguards such as:<\/p>\n<ul>\n<li>Standard Contractual Clauses (SCCs)<\/li>\n<li>GDPR-compliant agreements<\/li>\n<\/ul>\n<h3>11. Data Subject Rights<\/h3>\n<p>OffertBox shall assist the Customer in responding to requests from data subjects, including:<\/p>\n<ul>\n<li>Access<\/li>\n<li>Rectification<\/li>\n<li>Erasure<\/li>\n<li>Restriction<\/li>\n<li>Data portability<\/li>\n<\/ul>\n<h3>12. Data Breach Notification<\/h3>\n<p>In the event of a personal data breach, OffertBox shall:<\/p>\n<ul>\n<li>Notify the Customer without undue delay<\/li>\n<li>Provide relevant information<\/li>\n<li>Assist in mitigation<\/li>\n<\/ul>\n<h3>13. Deletion and Return of Data<\/h3>\n<p>Upon termination of the Service, the Customer may request:<\/p>\n<ul>\n<li>Deletion of all personal data<\/li>\n<li>Return\/export of data<\/li>\n<\/ul>\n<p>Unless legal obligations require retention.<\/p>\n<h3>14. Audit Rights<\/h3>\n<p>The Customer may request information regarding compliance.<\/p>\n<p>OffertBox may provide:<\/p>\n<ul>\n<li>Documentation<\/li>\n<li>Security descriptions<\/li>\n<li>Compliance confirmations<\/li>\n<\/ul>\n<h3>15. Liability<\/h3>\n<p>Each party is responsible for its own compliance with GDPR.<\/p>\n<p>OffertBox shall not be liable for:<\/p>\n<ul>\n<li>Improper use of data by the Customer<\/li>\n<li>Unlawful instructions from the Customer<\/li>\n<\/ul>\n<h3>16. Governing Law<\/h3>\n<p>This DPA is governed by the laws of Sweden.<\/p>\n<h3>17. Contact<\/h3>\n<p>For GDPR-related inquiries:<\/p>\n<p><strong>Blixtgo Agency AB<\/strong><br \/>\n<a href=\"mailto:info@offertbox.se\">info@offertbox.se<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Last updated: March 2026 This Data Processing Agreement (\u201cDPA\u201d) forms part of the Terms of Service between: Blixtgo Agency AB (org. no. 559069-9038), Drottninggatan 6A, 212 11 Malm\u00f6, Sweden (\u201cProcessor\u201d or \u201cOffertBox\u201d) and The registered business using the OffertBox platform (\u201cController\u201d or \u201cCustomer\u201d). 1. Purpose of this Agreement This DPA regulates the processing of personal [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-538","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/offertbox.se\/index.php\/wp-json\/wp\/v2\/pages\/538","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/offertbox.se\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/offertbox.se\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/offertbox.se\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/offertbox.se\/index.php\/wp-json\/wp\/v2\/comments?post=538"}],"version-history":[{"count":2,"href":"https:\/\/offertbox.se\/index.php\/wp-json\/wp\/v2\/pages\/538\/revisions"}],"predecessor-version":[{"id":543,"href":"https:\/\/offertbox.se\/index.php\/wp-json\/wp\/v2\/pages\/538\/revisions\/543"}],"wp:attachment":[{"href":"https:\/\/offertbox.se\/index.php\/wp-json\/wp\/v2\/media?parent=538"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}