Data processing agreement

Last updated February 1, 2026

This Data Processing Agreement (“DPA”) is entered into between:

Jan Nováček, a sole trader conducting business under the laws of the Czech Republic, with registered address at Novoveská 10, 664 12 Oslavany, Czech Republic, IN: 01839811, VATIN: CZ9107224357 (hereinafter referred to as the “Processor”),

and the customer of the Readivo service (hereinafter referred to as the “Controller”).

This DPA governs the rights and obligations of the parties in relation to the processing of personal data in accordance with Regulation (EU) 2016/679 (GDPR).

1. SUBJECT MATTER OF PROCESSING

The Processor provides the Controller with the Readivo SaaS platform, which enables technical processing of audio content, its distribution and related analytical functionality.

In the course of providing the Services, the Processor may process personal data on behalf of the Controller.

2. SCOPE AND PURPOSE OF PROCESSING

Personal data are processed solely for the purpose of providing the Services under the contractual relationship with the Controller, in particular:

  • technical storage and delivery of audio content;
  • ensuring functionality of the audio player;
  • maintenance of technical logs;
  • ensuring security and stability of the Services.

3. TYPES OF PERSONAL DATA

Processed personal data may include in particular:

  • technical identifiers (e.g. IP address);
  • audio playback data;
  • metadata related to content;
  • personal data contained in content uploaded by the Controller.

4. CATEGORIES OF DATA SUBJECTS

Data subjects include in particular:

  • visitors of the Controller’s websites;
  • users of the audio player;
  • employees or contractors of the Controller.

5. OBLIGATIONS OF THE PROCESSOR

The Processor undertakes to:

  • process personal data only on documented instructions of the Controller;
  • ensure confidentiality of personal data;
  • implement appropriate technical and organizational security measures;
  • assist the Controller in fulfilling obligations towards data subjects;
  • delete or anonymize personal data after termination of the Services, unless retention is required by applicable law.

6. SUBPROCESSORS

The Controller grants the Processor a general authorization to engage subprocessors listed in the Subprocessors List.

The Processor shall ensure that subprocessors are bound by data protection obligations at least equivalent to those set out in this DPA.

7. PLACE OF PROCESSING

Personal data are primarily processed within the European Union. Any transfers outside the EU are carried out only in compliance with GDPR requirements.

8. LIABILITY

The Processor’s liability is limited to the extent permitted by applicable law and corresponds to the liability set out in the main agreement (Terms of Service).

9. FINAL PROVISIONS

This DPA forms an integral part of the Readivo Terms of Service.

This DPA is governed by the laws of the Czech Republic.

This Data Processing Agreement forms an integral part of the Terms of Service.

The current list of subprocessors is available here.