Legal documents
The complete GDPR documentation package for EduRegie: how we process personal data, what measures we take, and what happens in the event of an incident. These documents form the basis for the data processing agreement with your school.
Draft, not yet legally reviewed. These documents were professionally drafted based on the standard GDPR structure, but have not yet been checked by a lawyer. Do not sign them as a final agreement — use them as a starting point for discussion with your own lawyer or DPO.
- Data Processing AgreementGoverns how Elhoucine Automation processes personal data on behalf of the school (Art. 28 GDPR).
- DPIA templateData Protection Impact Assessment, pre-filled with EduRegie-specific answers.
- Security AnnexThe concrete technical and organizational security measures (Art. 32 GDPR).
- Sub-processor listOverview of all parties that process data on our behalf, with location and nature of the data.
- Incident procedureThe steps to follow in the event of a (suspected) data breach, including notification deadlines.
- Data Retention PolicyRetention periods per data category, aligned with what's operationally necessary.
- Authorization matrixWho within EduRegie may see and edit which data, and how that is technically enforced.
Questions about these documents? Email info@elhoucineautomation.nl.