Data Processing Agreement (DPA)

To ensure full GDPR compliance, you as the controller must conclude a Data Processing Agreement (DPA) with the operator of your Relution environment (the processor). The new “Create DPA” function allows you to configure and sign this agreement entirely digitally.

Relution thereby supports an efficient, transparent, and legally compliant conclusion of Data Processing Agreements between Relution GmbH and the customer.

In the notification area (1), a global message is displayed for each organization. This ensures that the DPA can be concluded individually for each tenant or globally for all sub-tenants.

You can access the DPA settings in two ways:

  1. Directly via the notification (1 + 2) in the notification area.
  2. Via the menu path: Home → Settings → General / DPA

DPA notification and settings menu in Relution

1. General Information

This section serves to clearly identify the signatory and the legal entity concluding the agreement. The person completing this section must be authorized to sign on behalf of the organization.

FieldDescription
Full name of the signing personThe name of the person who signs the agreement in a legally binding manner.
EmailThe email address of the signing person.
Company nameThe official name of your organization (the controller).
Address, postal code, city, countryThe official address of your organization.

2. Important Note on Art. 9 GDPR

Please note the highlighted blue notice:

The processing of data under Article 9 GDPR is not permitted and must be prevented by the customer.

Background: Article 9 GDPR governs special categories of personal data (e.g., health data, ethnic origin, political opinions). Since Relution is an MDM system that primarily processes technical and administrative data, the processing of these highly sensitive data categories is not permitted in standard operation and must be prevented by you as the customer.

3. Type of Data

In this section, you define which categories of personal data are processed on your behalf as part of using Relution. Check all applicable categories whose data occurs in your Relution instance:

  • Master data (e.g., first and last name, gender, email address, address, phone number)
  • Contract master data (products, purchase contract, purchase price, warranties)
  • Log data (IP address, timestamp, events with user context)
  • User-generated content (e.g., forum posts, feature requests, support requests)
  • Device data (device type, device number, IP address, operating system information, installed apps)
  • Location data (iBeacons, GPS position, cellular network, WiFi networks)

If needed, you can add further data categories not listed here via “Add other”.

4. Group of Data Subjects

Select which groups of people are affected by the data processing in your Relution instance:

  • Parents and parent representatives
  • End customers and suppliers
  • Employees (e.g., workers, teachers, trainees, administrative staff)
  • Students

Here too, use the “Add other” function if further groups are affected that are not included in the list.

5. Emergency Contact

Enter here the contact details of the person in your organization who can be contacted immediately in the event of a data breach or other security-relevant emergencies. This information is mandatory.

  • Name
  • Email
  • Phone

6. Conclusion and Signature

Before concluding the agreement, you must provide two confirmations:

  1. Confirmation of signing authority: You confirm that you are authorized to conclude the agreement on behalf of your organization.
  2. Accept for all sub-tenants: This option is relevant if, as a parent instance (e.g., a school authority), you also conclude the agreement for subordinate, managed units (e.g., individual schools).

Once all fields have been filled in correctly and the confirmations have been set, you can:

  • Preview: Review the complete agreement text in advance.
  • Sign DPA: Conclude the agreement digitally. The DPA is thereby legally valid.

Keep the signed document carefully as part of your documentation obligations (accountability under GDPR).

Please note: A digital copy of the signed DPA is automatically sent to the Relution license server.

Notes on Signing the DPA

If you are not authorized to sign the Data Processing Agreement (DPA), please proceed as follows:

  • Account creation: Create a separate account for the colleague who is authorized to sign.
  • Signing: The colleague can then log in to the portal and sign the DPA independently.

Relution 26.0.0