> Canonical page: https://www.sellready.eu/en/dpa

# Data processing agreement (DPA)

## What this is about

When you connect your Etsy shop or upload documents, SellReady processes this data on your behalf. You remain the controller, we are the processor under Art. 28 GDPR. The DPA sets out what we may do with this data – and what not.

## Subject and duration

The subject is reading, storing and evaluating shop and listing data from Etsy, AI suggestions for classifying your products and storing your documents, each for the rule-based check. The DPA applies for the duration of your contract.

## Data and data subjects

- **Types of data:** Shop name, listing content (title, description, tags, materials, category, images), manufacturer and responsible person contacts, content of uploaded documents
- **Data subjects:** You as a sole trader, contact persons at manufacturers and EU responsible persons
- **Not included:** Order and buyer data – SellReady does not read orders

## Our obligations

- Processing only on your documented instructions – essentially: the way you use SellReady.
- Confidentiality of everyone with access to the data.
- Technical and organisational measures as described on the [security page](https://www.sellready.eu/en/security).
- Support with data subject requests and data protection impact assessments.
- Notification of personal data breaches without undue delay, at the latest within [deadline].
- Deletion or return of all data after the contract ends, unless a retention obligation applies.
- Evidence of compliance and support with audits.

## Subprocessors

You grant a general authorisation for the [listed subprocessors](https://www.sellready.eu/en/subprocessors). Before a new subprocessor is added, we inform you by email in advance; you may object.

## Acceptance in the app

You accept the full DPA in SellReady under Settings → Privacy. We store the date and version of your acceptance. We ask you to accept any new version again.