Under the GDPR, you may be required to sign a Data Processing Agreement.
When it applies to you
Two things must be true:
- You're a professional with a WeTransfer account and are using this account on behalf of a business.
- In the transfers you send there's personal data — data that can identify an individual.
The relationship
If these two things are true for you, the GDPR tells us to define the relationship between you (the professional user) and us (WeTransfer).
Technically, this requirement is up to the one responsible for the data. In our relationship, that's you, the end-user. You have a goal, a purpose, for the data you send. We are the processor, meaning we take care of your request and have no purpose for ourselves for your data.
Downloading the DPA
You can download our DPA at wetransfer.com/documents/WeTransfer_Data_Processing_Agreement.pdf. It's legally binding as is.