---
title: "Data Processing Agreement — FlexiBooking"
url: https://flexibooking.com/dpa
description: "Standard Data Processing Agreement (DPA) covering FlexiBooking's role as a data processor under GDPR."
lang: en
---

Skip to main content

Legal

# Data Processing Agreement

Last updated: April 2026

This Data Processing Agreement (DPA) supplements the Terms of Service and applies whenever FlexiBooking processes personal data on your behalf, as defined by the GDPR.

## 1. Roles

You are the Data Controller of the personal data of your end-customers. FlexiBooking acts as Data Processor and only processes data on documented instructions from you.

## 2. Subject matter & duration

Processing is limited to what is necessary to deliver the service and lasts for the term of the underlying agreement, plus any required deletion period.

## 3. Categories of data & data subjects

Identification and contact data of your end-customers, transaction and booking metadata, and any optional fields you configure on your booking flows.

## 4. Sub-processors

We may engage sub-processors for hosting, email delivery and payments. The list is available on request; you have the right to object to the addition of any new sub-processor.

## 5. Security measures

Encryption in transit and at rest, role-based access control, audit logs, regular penetration testing, and a documented incident response process.

## 6. International transfers

Where data is transferred outside the EEA, the EU Standard Contractual Clauses (Module 2 or 3, as applicable) apply.

## 7. Audit & assistance

We assist you with DPIAs, data subject requests and supervisory authority enquiries, and make available the information necessary to demonstrate compliance.

## 8. Return & deletion

On termination, we return or delete personal data within 30 days, unless retention is required by law.

See also: Privacy (https://flexibooking.com/privacy-policy) · Terms (https://flexibooking.com/terms-policy) · Cookie (https://flexibooking.com/cookie-policy) · DPA (https://flexibooking.com/dpa)

## Structured data

```json
{
  "@context": "https://schema.org",
  "@graph": [
    {
      "@type": "Organization",
      "@id": "https://flexibooking.com/#organization",
      "name": "FlexiBooking",
      "url": "https://flexibooking.com/",
      "logo": "https://flexibooking.com/flexibooking-mark.png",
      "sameAs": [
        "https://www.linkedin.com/company/flexibooking",
        "https://twitter.com/flexibooking"
      ]
    },
    {
      "@type": "WebSite",
      "@id": "https://flexibooking.com/#website",
      "url": "https://flexibooking.com/",
      "name": "FlexiBooking",
      "publisher": {
        "@id": "https://flexibooking.com/#organization"
      },
      "inLanguage": [
        "en",
        "it"
      ]
    }
  ]
}
```