Data Processing Agreement (DPA)

As required by the GDPR (art. 28), the supply of an Analytics solution to a customer must be governed by a subcontracting agreement. All the elements that must be included in this contract (description and lawfulness of processing, limitation of purpose and retention, confidentiality, and security of data, point of contact ...) are present in our standard DPA available through the following link: https://www.atinternet.com/en/dpa-at-internet-france/ .

In the context of the consent exemption for audience measurement, a specific appendix is available within the same DPA (see Exemption and Hybrid Measurement below).

According to the definition of "processing" given by the GDPR (art. 4.2), the following are those applicable by default to the Piano Analytics solution:

• collection;

• recording, organizing, structuring and keeping (storage);

• consultation and use (usage);

• limitation, deletion or destruction (see Users’ rights - Analytics - Piano Confluence);