Data processing (agencies)

1. Scope and parties

This data processing agreement ("DPA") applies when an agency (the "Controller") uses Elanza to manage data of its creators, their contacts and brands. [Raison sociale] (the "Processor") processes that data on the Controller's behalf, under Article 28 GDPR. It forms part of the terms of use.

2. Processing

Purpose: providing Elanza (email sorting, deal tracking, invoices, rights, exclusivities, payouts, reminders, dashboards).

Data: identity and contact details of creators and brand contacts, partnership emails and documents, amounts, dates, billing details.

Data subjects: managed creators, agency members, brand contacts. Duration: the subscription, then erasure or return.

3. Processor obligations

Process data only on the Controller's documented instructions (using the service is an instruction); ensure authorised people are bound by confidentiality; apply the security measures described in the privacy policy; help the Controller answer data subject requests and carry out impact assessments; notify any personal data breach without undue delay and within 48 hours of becoming aware of it.

4. Sub-processors

The Controller authorises the sub-processors listed in the privacy policy. Any addition or replacement is notified at least 30 days in advance; the Controller may object on legitimate grounds and terminate if no solution is found.

5. Transfers

Transfers outside the EU rely on the European Commission's standard contractual clauses or an adequacy decision.

6. End of contract

At the end of the subscription, the Controller may export the data, which is then erased within 30 days unless the law requires retention.

7. Audits

The Processor provides the information needed to demonstrate compliance and allows reasonable audits, on written request to [e-mail données personnelles], with 30 days' notice.

8. Billing mandate

When the agency issues invoices in a creator's name through Elanza, it confirms it holds a written billing mandate from that creator, recorded in the service, and remains solely responsible for its existence and scope.