Data Processing Agreement
Last updated: June 8, 2026
This Data Processing Agreement (DPA) supplements our Terms of Service and governs the processing of personal data carried out by Guild SPP SL as a processor on behalf of members acting as controllers, where applicable.
Subject matter
Processing personal data necessary to deliver the Guild SPP services contracted by the controller.
Duration
For the term of the underlying agreement plus any retention period required by law.
Sub-processors
We may engage sub-processors who provide appropriate guarantees and are bound by written agreements with terms no less protective than this DPA.
Security
We implement appropriate technical and organisational measures including encryption in transit, access controls, and incident response.
Data subject rights
We assist controllers in responding to data subject requests in accordance with the GDPR.
Return / deletion
On termination, we return or delete personal data, subject to legal retention obligations.