Data Processing Agreement (DPA)
The binding version is the German one at AVV
Updated on 12 October 2026
Summary for Business Clients:
- We act strictly as a Data Processor according to GDPR/DSGVO regulations.
- Processing is performed exclusively for the purpose of digitizing your media.
- We utilize certified subcontractors for hosting and communication services.
- Digital copies are deleted after the project completion according to our retention periods.
1. Subject Matter and Roles
This Agreement governs the processing of personal data by Basqueluma GmbH (Processor), Maria-Theresien-Straße 42, 6020 Innsbruck, on behalf of the Client (Controller). Both parties commit to full compliance with the General Data Protection Regulation (GDPR/DSGVO) and the Austrian Data Protection Act (DSG).
2. Nature and Purpose of Processing
Processing involves the digitization of analog media, including video cassettes, audio tapes, films, and slides. The data processed includes personal information contained within these media, as well as the Client's contact details for order management. The sole purpose is the conversion of analog archives into digital formats as defined in our Services overview.
3. Obligations of the Processor
Basqueluma GmbH undertakes to process personal data only upon documented instructions from the Controller. All employees and staff are bound by strict confidentiality agreements. Processing is strictly limited to the specified purpose. Supplementary provisions regarding liability can be found in our Terms of Service (Section 3).
4. Sub-processors
To provide the required services, Basqueluma GmbH employs the following sub-processors:
- World4You Internet Services GmbH (Hosting), Wolfgang-Pauli-Straße 2, BT3, 4020 Linz.
- FormSubmit (Communication service), USA, for the transmission of contact inquiries.
The Processor guarantees that these sub-processors are contractually bound by the same data protection obligations as set forth in this agreement.
5. Data Security and Confidentiality
We implement appropriate technical and organizational measures (TOM) to protect data against unauthorized access, loss, or destruction. In the event of a personal data breach, Basqueluma GmbH will notify the Client without undue delay after becoming aware of the incident.
6. Deletion and Return of Data
Upon full completion of the service and after the expiration of the storage period of 60 days defined in our business rules, all digital copies of the Client's media will be irrevocably deleted, unless a different written agreement has been made. The return of original physical media is handled according to the conditions in the Terms of Service.
7. Audit and Control Rights
The Controller is entitled to verify the compliance of Basqueluma GmbH with its data protection obligations in an appropriate manner. Such audits must be announced in writing with 14 days' notice and must not disproportionately disrupt business operations.
8. Final Provisions
This DPA is an integral part of the business relationship. Amendments must be made in writing. The laws of the Republic of Austria apply. The place of jurisdiction is Innsbruck. For complaints, the Austrian Data Protection Authority (Österreichische Datenschutzbehörde - DSB), Barichgasse 40-42, 1030 Wien, is available.
Contact for data protection inquiries: [email protected] or Tel. 0512 56 08 99.