A Data Processing Agreement (DPA) is a formal contract between a data controller and a data processor that governs how personal data is handled, stored, protected, and processed in compliance with applicable privacy laws such as GDPR. The purpose of a DPA is to ensure that all personal data collected, stored, or processed through a platform like Bodygraph is managed securely, lawfully, and with clear accountability.
At Bodygraph, the DPA outlines the responsibilities of both the subscriber and Bodygraph in relation to personal data collected through chart integrations, report generation, and statistics tracking.
What the DPA Covers
-Definitions of data controller and data processor roles
-Types of personal data processed
-Security measures and obligations
-Subscriber and Bodygraph responsibilities
-Rights of data subjects
-Compliance with privacy regulations
Where to Find the Bodygraph DPA
Subscribers can review the full Data Processing Agreement HERE.
We recommend all subscribers review the DPA to understand how personal data is protected and how responsibilities are shared.
Still have questions, is above guide outdated? Please message us on Live Chat or send an email to support@bodygraph.com.