Skip to content
Kalender SyncDocs
Go to app

DPA & sub-processors

Open in ChatGPT

Data processing agreement (DPA)

Section titled “Data processing agreement (DPA)”

DPA included on every plan for business use – part of our terms. If you use Kalender Sync as a business (section 14 BGB, including freelancers and sole traders), the DPA under Art. 28 GDPR applies once you accept the terms – on Free, Basic and Professional, with no signature and no request needed. You can save it as PDF from the print view.

  • If your records need a signed copy, write to support@kalender-sync.de – the content is identical to the online version.
  • For contracts concluded before 17 October 2026, the DPA applies once you accept it in text form (a short email is enough) or once it is incorporated through a change to the terms; until then we provide it on request.

Sub-processors

Section titled “Sub-processors”

The authoritative list is the sub-processor list on kalender-sync.de. It is an annex to the DPA and states purpose, processing location and safeguards for each provider. We announce new or replaced sub-processors by email at least 30 days in advance; you can object within 30 days (section 7 of the DPA).

In short:

  • Hetzner (Germany) – hosting of app and database in Nuremberg, encrypted backups in Falkenstein.
  • Lettermint (Netherlands) – sign-in codes and transactional email.
  • Customer.io (USA, EU data region, Standard Contractual Clauses) – service, onboarding and trial email; no calendar content or credentials.
  • Brevo (France) – historical records only, active sending switched off.

Not sub-processors are the calendar services you connect yourself (Google, Microsoft, Apple iCloud, CalDAV providers): calendar data only flows between your own accounts. The same goes for an AI assistant you connect via MCP. Payment processing through Stripe happens under our own responsibility and is described in the privacy policy.

Authoritative sources

Section titled “Authoritative sources”