No, a Data Processing Agreement (DPA) between your organisation and CarCollect is not required.
A Data Processing Agreement is only mandatory when an organisation processes personal data on behalf of another party. This is not the case when using CarCollect.
How does CarCollect handle personal data?
CarCollect processes personal data under its own responsibility. This means that CarCollect does not act as a processor on behalf of your organisation, but as an independent data controller under the General Data Protection Regulation (GDPR).
The same applies the other way around: your organisation does not process personal data on behalf of CarCollect.
What does this mean for your organisation?
Because there is no processor relationship:
You do not need to sign a Data Processing Agreement with CarCollect.
You remain responsible for processing personal data correctly and securely within your organisation.
You are responsible for providing an appropriate privacy statement and implementing the necessary internal procedures.
Where can I find more information?
More information about how CarCollect handles personal data can be found in the CarCollect Privacy Statement.
Do you have questions about privacy, terms and conditions, or the use of CarCollect? Please contact our Customer Success team.