This Data Processing Addendum (DPA) governs the processing of personal data in accordance with the EU General Data Protection Regulation (GDPR) when using IntelligentAPI services.
Note: This DPA automatically applies to all enterprise customers and is incorporated by reference into our Terms of Service.
Customer - The organization using IntelligentAPI services, who determines the purposes and means of personal data processing.
IntelligentAPI GmbH - Processes personal data on behalf of the Customer in accordance with documented instructions.
Individuals whose personal data is contained within company information accessed through our API (e.g., company executives, employees).
Legitimate Interests: Processing is necessary for legitimate business purposes of both IntelligentAPI and our customers, balanced against data subjects' rights and freedoms. Data subjects can reasonably expect such processing given the public nature of the information.
IntelligentAPI will process personal data only on documented instructions from the Customer, including with regard to transfers of data to third countries.
We will notify Customers of any personal data breach without undue delay and no later than 72 hours after becoming aware, providing all relevant information required under Article 33 GDPR.
| Service Provider | Service | Location |
|---|---|---|
| Railway | Cloud hosting | EU/US (adequacy decision) |
| Stripe | Payment processing | EU/US (SCCs) |
| OpenAI | AI processing | US (SCCs) |
Changes to Sub-processors: We will inform customers of any intended changes to sub-processors, giving them the opportunity to object.
IntelligentAPI will assist Customers in responding to data subject requests by providing relevant information and, where feasible, enabling the Customer to fulfill data subject rights.
Note: Some rights may be limited where data is publicly available or processing is necessary for legitimate interests.
Where SCCs are used, we implement additional technical and organizational measures to ensure data protection standards equivalent to those in the EU.
Email: dpo@intelligentapi.ch
Response Time: Within 30 days
For data subject requests, processing questions, or DPA-related inquiries, contact us at: gdpr@intelligentapi.ch
Audit Rights: Customers have the right to audit our data processing activities upon reasonable notice and in accordance with confidentiality obligations.