DPA

Data Processing Agreement

Effective from: 19.05.2025
Available at: https://striptu.com/dpa

1. Conclusion of the Agreement

Upon creating an account in Striptu, the user acting as the data controller (e.g. data of their clients) entrusts FREELANCE Kamil Jabłoński (Striptu) with the processing of personal data under the terms set out in this agreement. The agreement is concluded without the need for separate signatures – by accepting the checkbox during registration.

2. Scope of Entrustment

The Controller entrusts Striptu with the processing of personal data of their clients for the purpose of providing the service – i.e. generating invoices based on Stripe transactions via Fakturownia.pl. The data may include: first name, last name, e-mail, company details, tax identification number, payment data, and other data required for issuing an invoice.

3. Obligations of Striptu as Processor

Striptu undertakes to:

  • process data solely in accordance with the Controller's instructions and solely for the purpose of providing the service,
  • ensure confidentiality and training of persons with access to the data,
  • implement appropriate security measures in accordance with Art. 32 GDPR,
  • assist the Controller in fulfilling the rights of data subjects,
  • notify about data-related incidents,
  • upon termination of cooperation, delete or return the data – at the user's discretion.

4. Sub-processing (sub-processors)

The Controller consents to Striptu using the following sub-processors:

  • Stripe, Inc. (payment processing),
  • Fakturownia Sp. z o.o. (invoice issuing),
  • hosting and backup provider OVH
  • analytics and monitoring providers (MixPanel, Google Analytics, Piwik PRO).

In the event of adding new sub-processors, Striptu will inform the Controller in advance.

5. Transfer outside the EEA

The Controller consents to the transfer of data to third countries (e.g. USA) in accordance with Art. 46 GDPR – using **Standard Contractual Clauses (SCC)** or other compliant safeguarding mechanisms.

6. Term of the Agreement

The agreement remains in force for the entire duration of the user's account. Upon its deletion, the data is permanently removed, unless the Controller requests its return.

7. Liability

Striptu is liable for data processing in accordance with GDPR, to the extent arising from its role as Processor. It is not liable for the actions of the user as the Data Controller.