Data Processing Agreement

Last Updated: December 22, 2025

Processor

NP Platforms, CVR 44888548

Scope

Applies only to candidate personal data.

Processing

Purpose-limited to Service functionality.

No automated decision-making. Human review required.

Retention

  • As configured by the Controller
  • Default: 6 months
  • Deletion after termination within 2 months

Security

Technical and organizational measures appropriate to the risk.

Subprocessors

Breach Notification

Without undue delay, no later than 72 hours.

Audits

Remote audits only, reasonable scope, cost recovery applies.

Governing Law

Danish law with mandatory EU provisions.