This Data Processing Agreement (“DPA”) incorporates the EU Standard Contractual Clauses
(Module 2 – Controller to Processor) pursuant to Article 46 GDPR.
Controller:
Dr. Wholeness LLC, United States
2020 Borst Ave, Suite 2, Centralia, WA 8531
info@drwholeness.com
Processors:
– Google Analytics (Google LLC)
– ActiveCampaign, LLC
This DPA supplements existing Terms of Service and vendor Data Processing Addenda.
In the event of conflict, the SCCs prevail.
ANNEX I – Description of Processing
Data Subjects:
– Website visitors
– Email subscribers
Categories of Personal Data:
– Identifiers (name, email, phone number, IP address)
– Device and usage data
Purpose of Processing:
– Website analytics and performance monitoring
– Email marketing and transactional communications
International Transfers:
– United States and other locations of vendor infrastructure
Safeguards:
– EU Standard Contractual Clauses (Module 2)
ANNEX II – Technical and Organizational Measures
– Encryption in transit and at rest
– Role-based access controls
– Multi-factor authentication where available
– Incident response and breach notification procedures
– Regular security audits and platform certifications
ANNEX III – Sub-processors
Google Analytics:
– Google LLC infrastructure
ActiveCampaign:
– Hosting and email delivery infrastructure
Signatures
Controller:
_________________________
Name:
Title:
Date:
Processor:
_________________________
Name:
Title:
Date: