1.Parties
- Client: the organization that uses Propositio and enters personal data (Data Controller).
- 9to5 BV (KvK number: 90662180), trading as Propositio, located at Van Ittersumstraat 150, 8012TN Zwolle, Netherlands: processor within the meaning of the GDPR.
2.Subject of processing
- Propositio processes personal data for generating, sharing and signing proposals, including user management and analytics.
- Categories of data subjects: employees of the client, prospects, customers and suppliers included in proposals.
- Categories of personal data: contact details, function information, transaction data, AI prompts and documents.
3.Duration and termination
- Processing lasts as long as the client uses the Service.
- After termination, Propositio ensures deletion or anonymization of personal data within 90 days, unless legal retention periods determine otherwise.
4.Obligations of Propositio
- Processes data exclusively on behalf of the client and in accordance with written instructions.
- Ensures appropriate technical and organizational security measures (i.e. encryption, RBAC, logging, monitoring).
- Supports the client in complying with GDPR requests (access, rectification, erasure).
- Reports data breaches without undue delay to the client with relevant information.
- Maintains a register of processing activities.
5.Sub-processors
- Propositio engages sub-processors such as Supabase, Vercel, OpenAI and Resend. The current list is available on request or via the support page.
- Propositio concludes an agreement with each sub-processor containing similar obligations.
- Changes in sub-processors are announced in advance; the client has the right to object.
6.Confidentiality
- Propositio and its employees treat all personal data strictly confidentially.
- This obligation continues after termination of the agreement.
7.Data subject rights
- Propositio forwards requests from data subjects to the client unless it is authorized to handle these requests itself.
- Support is provided within reasonable timeframes and at any costs.
8.Audits
- The client has the right to audit Propositio or engage an independent auditor.
- Audits are announced at least 14 days in advance and take place during office hours.
9.Liability
- Any liability of Propositio is limited in accordance with the Terms of Service.
- Fines or damage resulting from non-compliance by the client are at the expense of the client.
10.Final provisions
- This data processing agreement is governed by Dutch law.
- Changes are only valid when confirmed in writing by both parties.
Need a signed copy for your contract? Contact us via legal@proposit.io. Also consult the Terms of Service and Privacy Policy.