Last updated: 04/04/25

This Data Processing Agreement ("DPA") is part of the Terms of Use and Terms of Sale of the NEXTLEAD CRM platform, operated by CREACH AGENCY, a SAS (simplified joint-stock company) with a share capital of €2,500, registered under number 979 948 551 with the Paris Trade and Companies Register, headquartered at 60 rue François 1er, 75008 Paris, France.

1. Purpose

This agreement defines the terms under which CREACH AGENCY, as a data processor, processes personal data on behalf of the data controller (the user of the NEXTLEAD platform), in accordance with Article 28 of the GDPR.

2. Description of the Processing

Processing operations may include collection, hosting, structuring, consultation, and deletion of personal data entered by the user.

This includes, but is not limited to:

• Contact information (names, emails, phone numbers)
• Company data
• Communications or activity logs

3. Obligations of CREACH AGENCY (Processor)

CREACH AGENCY commits to:

• Process personal data solely on documented instructions from the data controller (user).
• Not use the data for its own purposes.
• Ensure confidentiality by all persons authorized to process the data.
• Implement appropriate technical and organizational security measures.
• Assist the data controller in responding to data subject requests (access, deletion, etc.).
• Notify the data controller of any data breach within 72 hours.
• Maintain a record of processing activities carried out on behalf of the controller.

4. Subprocessors