---
title: Data Processing Agreement
description: Data Processing Agreement (DPA) for RankPirate - GDPR compliance and data protection
---

# Data Processing Agreement (DPA)

**Effective date: 22. January 2026**

This Data Processing Agreement ("DPA") forms part of the Terms of Service between Jure Rožman s.p., SI72369213, Šinkov Turn 24a, 1217 Vodice, Slovenia ("RankPirate", "processor"), and the customer ("customer", "controller").

This DPA applies where RankPirate processes personal data on behalf of the customer in connection with the RankPirate service.

## 1. Definitions

Terms not defined in this DPA have the meaning given in the GDPR or the Terms of Service.

- **GDPR** means Regulation (EU) 2016/679.
- **Personal data**, **processing**, **controller**, **processor** have the meanings given in the GDPR.
- **Services** means the RankPirate platform and related services.

## 2. Scope and Roles

2.1 The customer acts as data controller.

2.2 RankPirate acts as data processor.

2.3 RankPirate processes personal data only on documented instructions from the customer, including as necessary to provide the services.

## 3. Details of Processing

### a) Subject Matter

Provision of AI visibility analytics, reporting, and related SaaS functionality.

### b) Duration

For the duration of the customer's use of the services and as necessary thereafter in accordance with this DPA.

### c) Nature and Purpose

Processing required to:

- Provide and operate the services
- Ensure security and performance
- Provide customer support

### d) Categories of Data Subjects

- Customer employees
- Authorized users
- Customer representatives

### e) Categories of Personal Data

May include:

- Names
- Business email addresses
- User identifiers
- IP addresses
- Usage and log data

RankPirate does not intentionally process special categories of personal data.

## 4. Processor Obligations

RankPirate shall:

- Process personal data only on documented instructions from the customer
- Ensure persons authorized to process personal data are bound by confidentiality
- Implement appropriate technical and organizational security measures
- Assist the customer in responding to data subject requests
- Assist with GDPR compliance obligations where applicable
- Notify the customer of personal data breaches without undue delay
- Make available information reasonably necessary to demonstrate compliance

## 5. Security Measures

RankPirate implements appropriate technical and organizational measures, including:

- Access controls and authentication
- Logical separation of customer data
- Encryption in transit where applicable
- Monitoring and incident response procedures

Security measures may be updated over time to reflect industry standards.

## 6. Subprocessors

6.1 The customer authorizes RankPirate to engage subprocessors for the provision of the services.

6.2 RankPirate shall:

- Enter into written agreements with subprocessors imposing data protection obligations equivalent to this DPA
- Remain responsible for subprocessors' compliance

6.3 A current list of subprocessors may be made available upon request or referenced in RankPirate's documentation.

## 7. International Data Transfers

Where personal data is transferred outside the EEA, RankPirate ensures appropriate safeguards, including:

- Adequacy decisions
- Standard contractual clauses
- Equivalent legal mechanisms

## 8. Data Subject Requests

If RankPirate receives a request from a data subject relating to personal data processed on behalf of the customer, RankPirate shall:

- Notify the customer without undue delay
- Not respond directly unless required by law

## 9. Personal Data Breaches

RankPirate shall notify the customer without undue delay after becoming aware of a personal data breach affecting customer data and provide reasonably available information to assist the customer in meeting its legal obligations.

## 10. Deletion or Return of Data

Upon termination of the services, RankPirate shall:

- Delete or return personal data processed on behalf of the customer, at the customer's choice, unless retention is required by law

## 11. Audits

RankPirate shall make available information reasonably necessary to demonstrate compliance with this DPA.

Audits:

- Must be reasonable, limited in scope, and subject to confidentiality
- May be fulfilled through documentation or third-party certifications where available

## 12. Liability

Liability arising from this DPA is subject to the limitations set out in the Terms of Service.

## 13. Precedence

In the event of a conflict between this DPA and the Terms of Service, this DPA shall prevail with respect to data protection matters.

## 14. Governing Law

This DPA is governed by the laws of Slovenia, excluding conflict-of-law principles.

## 15. Contact

For data protection inquiries related to this DPA, contact:

**info@rankpirate.io**

```json
{"@context":"https://schema.org","@type":"WebPage","name":"Data Processing Agreement","description":"Data Processing Agreement (DPA) for RankPirate - GDPR compliance and data protection","url":"https://rankpirate.io/dpa","publisher":{"@id":"https://rankpirate.io/#organization"}}
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://rankpirate.io"},{"@type":"ListItem","position":2,"name":"Data Processing Agreement","item":"https://rankpirate.io/dpa"}]}
```