For users who process their customers' personal data in MonteurFlow.
This Data Processing Agreement ("Agreement") forms part of the agreement between:
Controller: the customer using a MonteurFlow account to manage their business (job sheets, quotes, invoices), hereinafter "Customer".
Processor: L Chain, Chamber of Commerce no. 42147983, VAT ID NL005534754B85, provider of the MonteurFlow web application (app.monteurflow.com), hereinafter "MonteurFlow".
1.1 MonteurFlow processes personal data on behalf of Customer, solely in connection with the use of the MonteurFlow application: creating and managing Customer's job sheets, quotes, invoices, customer data and calendar appointments.
1.2 This Agreement applies for the duration of the main agreement (Customer's use of MonteurFlow) and ends automatically upon its termination, without prejudice to Article 9 (data after termination).
1.3 MonteurFlow processes personal data solely on the basis of (written, including email) instructions from Customer, as embodied in the use of the application's regular functionality, unless MonteurFlow is required to process data under a statutory obligation. In that case, MonteurFlow informs Customer of that legal requirement before processing, unless that law prohibits such information on important grounds of public interest.
1.4 If Customer has multiple users under one company account (multi-user), the company — not the individual user who logs in — is the Controller within the meaning of this Agreement.
2.1 The processing concerns:
2.2 No special categories of personal data (Art. 9 GDPR) are processed, unless Customer enters these voluntarily in a free-text field of a job sheet. Customer is responsible for this and is advised not to do so.
The processing takes place solely for:
MonteurFlow does not use the data for its own purposes, including marketing, profiling or resale to third parties.
4.1 Customer authorises MonteurFlow to engage the following sub-processors:
| Sub-processor | Purpose | Location / notes |
|---|---|---|
| Supabase | Database and authentication | EU region, project gnfprosejaosgmufnpnf |
| Resend | Sending transactional email | Domain mail.monteurflow.com |
| Mollie | Processing iDEAL payments on Customer's behalf | NL-based payment provider |
| Moneybird | Accounting integration | Only active if enabled by Customer |
| Netlify | Application hosting | — |
4.2 MonteurFlow informs Customer of changes to this list of sub-processors. Customer may object in writing (including by email) to a new sub-processor within 14 days of that notice. If the parties do not reach a different arrangement within a reasonable period, Customer has the right to terminate the agreement with MonteurFlow as of the date the new sub-processor is put into use.
4.3 MonteurFlow ensures that sub-processors are contractually bound to at least the same data protection obligations set out in this Agreement.
4.4 To the extent a sub-processor processes personal data outside the European Economic Area (EEA), MonteurFlow ensures this happens on the basis of an adequate level of protection, such as the European Standard Contractual Clauses (SCCs) or an adequacy decision by the European Commission.
MonteurFlow implements appropriate technical and organisational measures, including:
6.1 MonteurFlow notifies Customer of a (suspected) data breach concerning the personal data it processes without undue delay and no later than 48 hours after becoming aware of it.
6.2 The notification includes at least: the nature of the breach, the (likely) data and data subjects involved, and the measures taken or proposed.
6.3 Customer is responsible for reporting the breach to the relevant data protection authority and to data subjects, where required.
MonteurFlow provides reasonable cooperation to Customer with:
8.1 MonteurFlow provides Customer, on request, with the information reasonably necessary to demonstrate MonteurFlow's compliance with this Agreement.
8.2 Customer may, after prior written notice within a reasonable period and no more than once per calendar year (unless there is concrete cause for an interim review, such as a data breach), carry out an audit itself or have one carried out by an independent third party bound by confidentiality. MonteurFlow will reasonably cooperate with this. The costs of the audit are for Customer's account, unless the audit reveals a shortcoming on MonteurFlow's part.
Upon termination of Customer's use of MonteurFlow, Customer's data will, at its request, be deleted or transferred to Customer (e.g. via the existing UBL/CSV export) within 30 days, unless a statutory retention obligation (such as the 7-year tax retention period for invoices) requires longer retention.
Liability between the parties under this Agreement is governed by the Terms of Service between MonteurFlow and Customer.
This Agreement supplements and forms part of the agreement between MonteurFlow and Customer for the use of the MonteurFlow application. This Agreement is governed by Dutch law.