Skip to content
Neubau | Mon-Fri 10-7, Sat 11-4
01 396 91 64 | By appointment only

Data Processing Agreement (DPA)

The legally binding version is the German language version: AVV

Updated: 12 October 2026

This agreement governs the cooperation between Basnetbase GmbH (the Processor) and our business clients (the Controller) regarding the processing of personal data required to perform our professional instrument services.

  • Purpose: Ensuring full GDPR and DSGVO compliance for B2B service contracts.
  • Scope: Applies to all instrument construction, tuning, and maintenance orders placed by legal entities.
  • Security: Implementation of technical and organizational measures to protect client data.
  • Transparency: Full disclosure of all sub-processors involved in the service chain.

1. Subject Matter and Duration

Basnetbase GmbH processes personal data on behalf of the Client to provide agreed-upon services, such as instrument maintenance, custom builds, or on-site tuning. This agreement commences upon the first order placement and remains in effect until the termination of the business relationship, unless statutory retention periods apply. Detailed service terms are outlined in our Terms and Conditions.

2. Categories of Data and Data Subjects

Only data strictly necessary for the execution of the order is processed:

  • Data Subjects: Employees of the Client, designated contact persons, or musicians acting on behalf of the Client.
  • Data Categories: Name, contact details (email, telephone), delivery address, and specific technical information regarding the instrument's condition and history.

3. Obligations of the Processor

Basnetbase GmbH undertakes to process personal data only on the documented instructions of the Controller. We ensure that all personnel authorized to process the data are bound by strict confidentiality obligations. All processing is carried out in accordance with the General Data Protection Regulation (GDPR/DSGVO) and the Austrian Data Protection Act (DSG).

4. Sub-processors

To provide the services, Basnetbase GmbH utilizes the following sub-processors:

  • easyname GmbH (Canettistraße 5/10, 1100 Wien): Hosting of the website and email infrastructure.
  • FormSubmit (USA): Processing of contact form submissions.

We guarantee that these sub-processors are committed to the same data protection standards as Basnetbase GmbH. Further details on international data transfers can be found in our Privacy Policy.

5. Data Security and Incident Notification

We implement appropriate technical and organizational measures (TOM) to protect data against unauthorized access, alteration, or loss. In the event of a personal data breach, the Client will be notified without undue delay, provided such notification is legally required under the DSGVO.

6. Deletion and Return of Data

Upon completion of the service or at the Client's request, all personal data shall be deleted or returned, unless statutory retention obligations exist. According to our business rules, the period for instrument collection after completion is 14 days, after which further administrative measures may be initiated.

7. Audit and Control Rights

The Client is entitled to verify, in a reasonable manner, whether Basnetbase GmbH complies with the provisions of this agreement. Such audits must be announced in advance and conducted with due consideration for the ongoing workshop operations in Vienna.

8. Final Provisions

This agreement is governed by the laws of the Republic of Austria. The place of jurisdiction for all disputes is Vienna. For inquiries, please contact the management:

Basnetbase GmbH
Burggasse 142, 1070 Wien
Email: [email protected]
Phone: 01 396 91 64
Represented by: Lukas Fuchs (Share Capital 10,000 €)

Supervisory Authority: Österreichische Datenschutzbehörde (DSB), Barichgasse 40-42, 1030 Wien (https://www.dsb.gv.at).