Skip to content
Zentrum • Mon-Fri 10-7, Sat 11-4
0732 94 53 10 • By appointment only

Data Processing Agreement (DPA)

The legally binding version is the German one at AVV

This agreement governs the cooperation between you as the Controller and Bearcatdock GmbH as the Processor in accordance with the General Data Protection Regulation (GDPR).

Key points at a glance:
  • We process your data exclusively based on your documented instructions.
  • We utilize certified IT service providers in the EU and the USA (FormSubmit).
  • Your data is removed after project completion according to our deletion periods.
  • We guarantee technical and organizational security for all your information.

1. Contracting Parties and Subject Matter

This agreement is concluded between the client (hereinafter "Controller") and Bearcatdock GmbH, Landstraße 142, 4020 Linz (represented by Managing Director Julia Schmid, share capital 35,000 €), hereinafter "Processor", to ensure data protection compliance in accordance with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

2. Nature and Purpose of Processing

The subject of processing is the data transmitted within the scope of bookbinding and restoration orders. This specifically includes:

  • Contact information (name, address, e-mail, telephone).
  • Specifications regarding materials to be processed (e.g., archive inventory numbers).
  • Billing data for B2B transactions.

The purpose is the execution of the commissioned craft services and the processing of payments according to the Payment Terms.

3. Obligations of the Processor

The Processor undertakes to process personal data only on the documented instructions of the Controller. The Processor ensures that all persons authorized to process the data have committed to confidentiality.

4. Sub-processors

To provide the service, the Processor employs the following sub-processors:

  • World4You Internet Services GmbH, Wolfgang-Pauli-Straße 2, BT3, 4020 Linz (Hosting of the website and e-mail infrastructure).
  • FormSubmit (USA) for the transmission of contact requests. The Controller is advised that data may be transferred to the USA; in this case, the EU Standard Contractual Clauses apply.

5. Data Security and Notification Duties

Bearcatdock GmbH implements appropriate technical and organizational measures to protect data against unauthorized access. In the event of a data breach, the Controller will be informed immediately if required by law. Further details on general security can be found in our Privacy Policy.

6. Deletion and Return of Data

Upon completion of the services or expiration of legal retention periods, all data will be deleted or returned to the Controller. Deletion is carried out according to internal guidelines and the deadlines established in the Terms and Conditions.

7. Final Provisions

This agreement is governed by Austrian law. The place of jurisdiction is Linz. For questions, please contact [email protected] or by phone at 0732 94 53 10.

Supervisory Authority: Österreichische Datenschutzbehörde (DSB), Barichgasse 40-42, 1030 Wien (www.dsb.gv.at).

This agreement is based on the Datenschutz-Grundverordnung (DSGVO), the Austrian Datenschutzgesetz (DSG), and relevant provisions of the Telekommunikationsgesetz 2021 (TKG 2021) and Konsumentenschutzgesetz (KSchG).

Updated on 15 October 2026.