Data processing agreement
The standard data processing agreement of Jaarrekening.io under Article 28 GDPR.
This is a convenience translation. Only the Dutch text is legally binding; in case of any difference, the Dutch version prevails. Dutch text
Parties and content
The agreement is concluded between the client (user of the platform, controller) and MLR Ventures GmbH, established in Berlin, Germany, trading as Jaarrekening.io (processor). It supplements the main agreement and applies for as long as that agreement is in force.
- Processing: the client's records in the platform: bookkeeping, annual accounts, tax worksheets, payroll records with employees' citizen service numbers (BSN), bank link, documents and AI features started by the user. Annex 1 lists the data per part, Annex 2 the security measures.
- Obligations of the processor: processing according to instructions, appropriate security (art. 32 GDPR) and deletion or return at the end.
- Sub-processors: general authorisation; the processor announces an addition or replacement at least 30 days in advance and you may object on reasonable grounds.
- Data breaches: notification without undue delay, at the latest within 72 hours of discovery.
- Audits and law: inspections or audits are possible; Dutch law, court in Amsterdam.
The full text is on this page. The current sub-processors are listed on Security and privacy; the privacy statement refers to that list.