Data Processing Agreement (AVV)
A data processing agreement (Auftragsverarbeitungsvertrag, AVV) is a contract required by the GDPR between a company and an external service provider that processes personal data on its behalf – a hosting, email or analytics provider, for example.
In practice
A data processing agreement must set out, among other things, the scope, purpose and duration of the processing as well as the technical and organisational safeguards the provider has in place. Reputable providers usually make their standard agreement available directly as a download or for online signature.