Data Processing Agreement
Version 1.0 — Effective: April 2, 2026
When you use PasteBase as part of your business operations and store personal data of third parties within paste content (e.g., email templates containing names or contact details), you act as the data controller and Nullbase ApS acts as the data processor under GDPR Article 28.
This Data Processing Agreement (DPA) governs how we process personal data on your behalf. It supplements our Terms of Service and is entered into automatically when you accept the Terms.
Download the full DPA
The complete Data Processing Agreement includes 15 articles and 4 schedules covering all GDPR Article 28(3) requirements, sub-processor lists, technical measures, and signature blocks.
What the DPA covers
Processing details
Subject matter, duration, nature and purpose of processing, categories of personal data, and data subjects covered.
Controller & Processor obligations
Your responsibilities as data controller and our obligations as data processor, including documented instructions and confidentiality.
Sub-processors
Complete list of authorised sub-processors (Hetzner, Resend, Google Fonts, jsDelivr), transfer mechanisms, and change notification procedures.
International transfers
EU-based hosting, EU-US Data Privacy Framework for US sub-processors, and Standard Contractual Clauses where required.
Security measures
Technical and organisational measures including encryption, access controls, session security, and infrastructure isolation.
Data subject rights
How we assist you in responding to access, rectification, erasure, portability, and objection requests from data subjects.
Breach notification
48-hour notification to you, assistance with supervisory authority reporting, and internal breach register.
Audit & termination
Your right to audit our compliance, data export in machine-readable format, and secure deletion upon termination.
Processor details
Nullbase ApS
Rougsøvej 1, 8940 Randers SV, Denmark
CVR/VAT: DK37283681
Email: support@pastebase.eu
Phone: +45 70 60 60 02
If your organisation requires a standalone signed copy of the DPA or has questions about data processing, contact us at support@pastebase.eu.