Legal

Data processing agreement (DPA)

As of June 1, 2026

This agreement governs the processing of personal data on instruction pursuant to Art. 28 GDPR.

Subject of processing

ValYouRise processes personal data solely on the documented instruction of the controller.

Place of processing

Processing takes place exclusively in the EU (Frankfurt, FRA1).

Technical and organizational measures

State-of-the-art TOMs apply, including encryption of sensitive keys and IP anonymization for form inputs.

Subprocessors

Engaged subprocessors are named transparently in the public list with region and DPA status. For sending transactional emails, an EU-resident email provider is engaged as a subprocessor; processing is EU-resident.