Carepie
Back to the project

Data processing agreement

Requesting a data processing agreement

If your company would like to manage personal data in a Carepie workspace, you can request a data processing agreement (DPA) from onthewall® GmbH. Briefly describe the intended workflow, for example “Our sales team wants to keep track of project contacts and their business contact details.” A description of the types of data is sufficient. Request a DPA by email

The current test version is intended for fictional sample data. Before processing data on your behalf, we clarify our respective roles, agree terms for the intended use and review the operating environment. Terms of use for the test version

What to agree before use

If your company determines the purposes for which personal data is processed and onthewall® GmbH carries out tasks on your instructions, Article 28 of the GDPR requires a binding agreement. The Berlin data protection authority provides a checklist for reviewing such agreements. Data processing guidance and checklist (in German)

For the draft, we document which tasks Carepie will carry out, for how long, the types of data involved and the categories of people affected. We also identify who may issue and receive instructions, and how your company can contact us about data access requests or data protection incidents.

The following details still need to be agreed for the intended operating environment.

  • Which technical and organisational measures protect the data, who has access and how backups can be restored.
  • Which providers supply hosting, email delivery and, where applicable, AI planning, where they process data, and what terms govern their engagement, changes and any transfers to third countries.
  • What evidence your company can inspect and how it can verify the agreed measures.
  • How your company can retrieve its data or have it deleted when the contract ends, and when remaining backup copies will be deleted.

Our privacy notice explains how the current test version handles chat messages, account details and emails. Privacy notice