Data Processing & Deletion Agreement (GDPR Compliant)
Parties:
Client (Data Controller): HQ Edit Denmark/EU.
Service Provider (Data Processor) HQ Edit DK33998783.
1. Scope of Processing
The Provider performs graphic editing services (clipping path, retouching, etc.) on images provided by the Client. These images may contain personal data under GDPR (e.g., recognizable faces, metadata, or private property).
2. Mandatory Data Deletion Policy (30 Days)
To ensure compliance with the EU General Data Protection Regulation (GDPR) Article 28(3)(g), the following retention policy is strictly enforced:
Final Delivery: Once work is uploaded to the HQ Edit platform and marked as “Approved” or “Completed” by the Client, a 30-day retention period begins.
Automatic Purge: Upon the expiry of 30 calendar days from the date of approval, the Provider is MANDATED to permanently delete all source files (PSDs), intermediate files, and final outputs (JPGs/PNGs) from all servers, local workstations, and cloud backups.
No Residual Copies: No copies of the Client’s data shall be retained by the Provider or any sub-processors after this period.
3. Legal Consequences & Liability
The Service Provider acknowledges that they are processing data on behalf of an EU-based entity and are subject to the following:
Non-Compliance: Failure to delete data within the 30-day window constitutes a material breach of contract and a violation of GDPR.
Right to Audit: The Client reserves the right to request a “Certificate of Erasure” or equivalent proof of deletion.
Indemnification: The Provider shall be held liable for any fines, legal fees, or damages imposed on the Client by EU authorities (e.g., Datatilsynet) resulting from the Provider’s failure to delete data as agreed.
Jurisdiction: Any disputes regarding data breaches shall be subject to [Vælg f.eks. Danish Law / Maritime & Commercial High Court of Denmark].
4. Confirmation
By continuing the service via hqedit.com, the Provider confirms they have technical measures in place to ensure automated or manual deletion within the 30-day timeframe.