Data processing agreement — StackLégal service

The contract for buying StackLégal is governed by the French version of these pages. This translation is for information. If the texts differ, the French version prevails.

These templates follow the GDPR in general. They do not claim to satisfy the national law of every country. English is not a Member State. The competent authority is that of the controller’s main establishment (for example the CNIL in France, or the DPC for many controllers whose main establishment is in Ireland). Competence still follows the controller’s main establishment (GDPR Article 56).

This DPA applies only when a professional customer asks StackLégal to process personal data on their behalf. The public site and the Gumroad checkout are not that processing. Annex: Vercel Inc. (hosting, United States) and, for the sale itself, Gumroad, Inc. (checkout, United States), on the terms those vendors publish.

The processor acts on documented instructions, notifies a breach without undue delay, and deletes or returns the data at the end of the service. Article 82 GDPR is not waived. No national fixed indemnity is added.