Back to Trust Center

A clear processor contract for business customers

When your team puts personal data into Content24, we process it on your instructions. Our Data Processing Addendum (DPA), Auftragsverarbeitungsvertrag (AVV) in German, formalizes Article 28 GDPR obligations.

Roles

Controller vs. processor

You (customer)

Typically the data controller for content, contacts, and campaign data you upload or generate for your brand.

Content24

Acts as processor for personal data processed while delivering the service, and as controller for account billing data we must manage directly.

What the DPA covers

Inside the Article 28 agreement

Subject matter, duration, nature, and purpose of processing

Categories of data subjects and personal data (as defined by your use)

Confidentiality obligations for authorized personnel

Technical and organizational measures (TOMs / TOMs annex)

Subprocessor rules, transparency, and objection windows

Assistance with data subject requests and DPIAs where applicable

Deletion or return of data at end of service

Breach notification without undue delay

How to get the AVV

Three practical paths

Read the published DPA

Our standard Data Processing Addendum is available online for legal review before signup.

View DPA

Enterprise execution

Procurement teams can request countersigned copies or discuss enterprise terms via your account contact or privacy@content24.ai.

Email privacy team

Map to your ROPA

Use the hosting and subprocessor pages together with the DPA annexes to complete your record of processing activities.

Hosting details

Newsletter

Stay ahead with Content24

Product updates, AI marketing tips, and launch news.

By subscribing, you agree to hear from Content24. See our Privacy Policy.