As a blogger, website operator or online entrepreneur, you work with many different services, tools or apps that process personal data on behalf.
These include, for example, newsletter services , WordPress hosters , website construction kits , cloud services or accounting software.
With this list I would like to provide an overview of which providers offer a contract and where you can find it.
Additions are always welcome!
This blog post is not legal advice! As a blogger and WordPress expert, I have dealt intensively with applicable data protection law, but I am not a lawyer. Therefore, I cannot assume any liability for the completeness, topicality and correctness of the content provided by me.
Table of contents
- 1. When do I need an AV contract?
- 2. Table of AV Contracts
- 3.FAQs
1. When do I need an AV contract?
Please note that you do not necessarily need an AV contract with every provider listed here, even if you use their services.
An order processing contract (AV contract/AVV for short), also order data processing contract (ADV contract) or data processing agreement (DPA), is always required when a company processes data on your behalf.
Here you will find a small overview of which services, tools and providers require you to conclude an AV contract and which do not:
| ✅ Need AV contract | ❌ Do not require an AV contract |
|---|---|
| • Web hoster • WordPress hoster • Website construction kits • Newsletter services • Online course platforms (cloud) • CMS (cloud) • Landing page software (cloud) • Google Analytics & alternatives • Shop systems (cloud) • Cookie content Tools (Cloud) • Cookie plugins (Cloud) • External print service providers • Archiving service providers • Document shredding service providers • Cloud storage • CRM systems • Accounting software |
• AI text generators • Cookie consent tools (self-hosted) • Cookie plugins (self-hosted) • Image databases • Keyword tools • WordPress shops (self-hosted) • Amazon affiliate program • Shop systems (self-hosted) • Landing page software (Self Hosted) • Online Course Platforms (Self Hosted) • Membership Plugins (Self Hosted) • LMS Plugins (Self Hosted) • Google AdSense • Affiliate Networks • Tax advisors • Lawyers • Postal service providers |
1.1 Data Controllers vs. Processors
Again, some service providers are data controllers rather than processors, meaning they determine the means and purposes of data processing, not you.
This is e.g. This is the case, for example, with Google Adsense or with affiliate networks such as AWIN or Webgains (if you are registered there as a publisher and not as an advertiser).
1.2 Exception: Use of external specialist services
Another exception is the “use of third-party specialist services” where data processing is not the main focus, such as:
- Postal services for the transport of letters or parcels
- Banking institutions for money transfer
- Debt collection agencies with assignment of claims
- Activities of persons subject to professional secrecy (tax consultants, lawyers, external company doctors, auditors)
The Bavarian State Office for Data Protection Supervision has compiled a detailed list of examples of processors and non-processors .
This article by Regina Stoiber also deals in detail with when it is a processor and when not .
In addition, I always recommend that you ask the support of a provider or look at their documentation to see whether they act as a processor or not.
2. Table of AV Contracts
| service | Location | Available? | category | Remarks |
|---|---|---|---|---|
| IONOS by 1 & 1 | EU/US | Yes | web hosting | Contract for order processing (PDF) |
| 1blu | Germany | Yes | web hosting | Contract for order processing (PDF) |
| ActiveCampaign | USA | Yes | newsletter tool | Can be downloaded here . |
| ad goal | Germany | Yes | Advertising | Order processing contract (PDF) General information on the GDPR |
| Adobe | Worldwide | Yes | Other | Can be requested here (DPA) |
| alpha hosting | Germany | Yes | web hosting | Can be downloaded from the Customer Center -> Personal Data -> Order Processing. Then send the fully completed contract by email to avv@alfahosting.de. |
| algolia | Worldwide | Not necessary | Other | Annex Data Processing Addendum (PDF) |
| alldomains.hosting | Austria | Yes | web hosting | Can be downloaded here . |
| all-inkl.com | Germany | Yes | web hosting | Can be completed online in the Members Area under Master data > Order processing . |
| AmazonAWS | Worldwide | Yes | Cloud storage | Can be downloaded here . More information on compliance can be found here . |
| Atlasian Cloud | Worldwide | Yes | Cloud storage | Can be downloaded here . (Data Processing Addendum DPA) |
| AWIN | EU | Not necessary | Advertising | According to their own statements , as an affiliate you do not need a contract with AWIN, since the networks do not act as processors. |
| bexio | Switzerland | Yes | CRM system | Appendix order processing to the General Terms and Conditions (PDF) |
| billbee | Germany | Yes | accounting | Can be completed here (must be logged in). |
| BillingEngine | Germany | Yes | accounting | Can be downloaded here (access only for registered users). |
| bitpalace | Germany | Yes | web hosting | Can be downloaded here . |
| blogfoster | EU | Yes | Advertising | Order data processing contract is part of the newly revised General Terms and Conditions. It can be viewed here . |
| Blogger.com | USA | No | Website Builder | No response from support, no official notification yet |
| bocombo | Germany | Yes | web hosting | AV contract can be concluded online in the customer area in the Miscellaneous > Data protection tab . |
| Calendar | USA | Yes | appointment processing | Can be downloaded in the customer area. |
| Calenso | Switzerland | Yes | appointment processing | Order processing contract (PDF) |
| check domain | Worldwide | Yes | web hosting | Can be completed in the customer area. ( source ) |
| CJ Affiliate | USA | Not necessary | Advertising | You don’t need it as an affiliate because CJ says it is not a processor. |
| clockin | Germany | Yes | time tracking | Contact support. |
| Clever Elements | Germany | Yes | newsletter tool | Can be completed in the customer area ( source ) |
| CleverReach | EU | Yes | newsletter tool | Can be downloaded in the customer area ( source ) |
| clockodo | Germany | Yes | time tracking | Can be downloaded in the customer area ( source ) |
| cloudflare | Worldwide | Yes | CDN | Can be downloaded in the customer area. More information on compliance can be found here . |
| collmex | Germany | Yes | accounting | Can be downloaded in the area here . (PDF) |
| Contabo | Germany | Yes | web hosting | Contact support |
| ConvertKit | USA | Yes | newsletter tool | Can be requested here . |
| Cyon | Switzerland | Yes | web hosting | Can be completed in the customer area according to this support document . |
| DATEV | Germany? | Yes | accounting | ADV contracts can be requested here . |
| Digistore24 | Germany | Not necessary | course platform | See the red box at the end of Lesson 4 . |
| DigitalOcean | Worldwide | Yes | Cloud storage | Can be viewed here . |
| Direct Mail for Mac | USA | Yes | newsletter tool | Can be downloaded here . |
| DiroHost | Germany | Yes | web hosting | Contact support |
| Dogado | Germany | Yes | Web hosting and cloud storage | Can be requested in the customer center. Information about this here. |
| Domain & Webspace Tremmel | Germany | Yes | web hosting | Can be requested here . |
| DomainFactory | EU | Yes | web hosting | Ask for support or download directly from the DomainFactory forms (point 16) on the website. |
| Domaintechnik.at | Austria | Yes | web hosting | Contract for order data processing (PDF), reseller version also available. |
| do.de | Germany | Yes | web hosting | Can be downloaded in the customer area. |
| DreamHost | Worldwide | Yes | web hosting | Data Processing Addendum forms part of the general contract. |
| drift | USA | Yes | chatbots | Contact support ( source ) |
| drip | USA | Yes | newsletter tool | Can be downloaded here . (Data Processing Addendum DPA) |
| Drop box | USA | Yes | Cloud storage | Yes, but only for business accounts. More information in the GDPR Guidance Center . |
| easybill | Germany | Yes | accounting | Can be completed in the account under Help > General Data Protection Regulation GDPR . |
| easy booking | Austria | Yes | Appointment | Can be downloaded here . |
| Eclipso | Germany | Yes | Mailbox | According to the provider, an AV contract is automatically included in the business tariff. |
| edudip | Germany | Yes | course platform | Is automatically issued when logging in as an academy owner. More information is available here . |
| eKomi | Worldwide | Yes | Other | Can be requested from customer support, will then be sent by email. |
| enerSpace web hosting | Germany | Yes | web hosting | Can be downloaded here . (PDF). More information is available here |
| ESTUGO | Germany | Yes | web hosting | Contact support ( source ). |
| etracker | Germany | Yes | Other | Can be downloaded here . |
| EVANZO | Germany | Yes | web hosting | All information can be found in the FAQ . The AV contract can be downloaded directly here. |
| Eventbrite | USA | Yes | Other | Data processing addendum is available but not always necessary. Further information can be found in the FAQ on EU data protection . |
| Evernote | Worldwide | Yes | Other | You get the contract by request (for the free version and paid plans). For the Premium Plus Basic plan , the DPA can also be signed online . |
| USA | not necessary | Advertising, social network | Facebook is usually the data controller for users and advertisers, but is the processor for Custom Audiences, Measurements and Analytics and Workplace by Facebook ( source ). | |
| FastBill | Germany | Yes | accounting | AVV can be concluded directly online in the FastBill account. |
| fc-hosting.de | Germany | Yes | web hosting | Send a message asking for an AV contract and naming the customer number. An AV contract is then sent to the email address provided by the customer. |
| financeAds | Germany | Yes | Advertising | Can be completed online in the customer area. |
| flyer alert | Germany | Yes | online printing company | Can be requested from support and will be sent. |
| flywheel | Worldwide | Yes | web hosting | Data Processing Addendum can be downloaded here . |
| FormAssembly | USA | Yes | Surveys & Forms | Data Processing Agreement can be downloaded here . |
| Photo Book Express24 | Germany | not necessary | online printing company | Fotobuchexpress24.de only expands the data protection declaration. |
| Freshdesk | USA | Yes | helpdesk | According to the support forum, you get a contract by email on request. |
| full story | USA | Yes | Analytics | Can be filled out here . |
| GetResponse | Worldwide | Yes | newsletter tool | Contact support |
| Gmail, Google Drive, etc. |
USA | No | Cloud storage | GDPR compliance of the free services only possible by switching to GSuite . |
| GMX | Germany | No | Mailbox | According to support, no AV contract is provided. |
| GN2 | Germany | Yes | web hosting | Can be requested from support. |
| Goneo | Germany | Yes | web hosting | According to the help article, it is available under Downloads in the customer center . |
| Google AdSense | USA | not necessary | Advertising | Google and its customers are considered controllers independently of each other, so no ADV contract is required (source: notification of 03/29/2018). |
| Google AdWords | USA | Yes | Advertising | You can find it in the account settings |
| Google Analytics | USA | Yes | Analytics | Can be accepted according to the help article in the customer area. The addition to data processing can be found in the account settings ( read the instructions from Dr. Schwenke !). |
| Google Search Console | USA | not necessary | Analytics | No personal data is transferred from the customer to Google. |
| Google Tag Manager | USA | Yes | Analytics | The Data Processing Addendum can be found under Administration > Account Settings > Data Processing Addendum . |
| Goolux24 | Germany | In progress | lead generation | Goolux24 is in the process of implementing a contract. |
| Greatnet | Germany | Yes | web hosting | All information can be found in the FAQ . The AV contract can be downloaded directly here. |
| GSuite & Google Cloud |
USA | Yes | Email mailbox, cloud storage | You can find instructions on how to do this here . |
| Hetzner | EU | Yes | web hosting | According to the data protection FAQ, ADV contracts are available in the customer area as an online form. |
| HostEurope | EU | Yes | web hosting | Can be downloaded here . |
| HostGator | USA | Yes | web hosting | A Data Processing Agreement is included in HostGator’s Terms of Service . |
| hosting.de | Germany | Yes | web hosting | An AV contract is stored in the customer center. |
| hostpress | Germany | Yes | web hosting | Contract for order data processing (PDF) |
| HotJar | USA | Yes | Analytics | Data Processing Agreement |
| hPage | Malta | Yes | Website Builder | Can be concluded online in the customer area in the user menu (top right) under user account > contract for order processing . |
| HubSpot | USA | Yes | CRM system | Data Processing Agreement |
| iNETsolutions.de | Germany | Yes | web hosting | AV contracts can be downloaded via WebConfig (customer portal). |
| InLinkz | Greece | Yes | Other | Data Protection Addedum (PDF) |
| InternetWerk | Germany | Yes | web hosting | According to this help article, an additional agreement on order processing can be downloaded from the customer login area. |
| INWX | Germany | Yes | web hosting | A ready-made contract for order data processing can be downloaded in the customer area under customer data > downloads. |
| IP projects | Germany | Yes | web hosting | Is available in the customer area under the sub-item GDPR. ( source ) |
| Jimdo | EU | Yes | Website Builder | Contract can be downloaded here . |
| JPBerlin | Germany | Yes | E-mail box, web hosting | The contract can be concluded online in the account management under Account – Information > AV contract . |
| KeyCDN | Switzerland | Yes | CDN | According to KeyCDN, an AV contract can be requested via support. |
| click tip | EU | Yes | newsletter tool | Can be taken out directly in the Klick-Tipp account (under My account > Order data processing ) |
| LA web hosting | Germany | Yes | web hosting | Can be downloaded in the customer area. ( source ) |
| leadpages | USA | Yes | lead generation | Can be downloaded in the customer area . |
| LexOffice | Germany | Yes | accounting | You will be informed directly when you log in. Can be downloaded here . |
| Lima City | Germany | Yes | web hosting | Can be downloaded in the customer area (login required). info here . |
| USA | Yes | social network | See here . | |
| LogMeIn | USA | Yes | video conferencing | LogMeIn includes services like GoToMeeting, GoToWebinar, Jive, and LastPass. Information on the GDPR and the Data Processing Addendum can be found here . |
| mailbox.org | Germany | Yes | Mailbox | Can be completed online in Account Management. info here . |
| mail.de | Germany | Yes | Mailbox | AV contract is available for download in the settings area of the webmailer. |
| mailchimp | USA | Yes | newsletter tool | The Data Processing Addendum is part of the MailChimp Terms and Conditions and can be viewed here . |
| Mailify | EU | Yes | newsletter tool | part of the terms and conditions. Can be viewed here . |
| MailerLite | EU | Yes | newsletter tool | Can be electronically signed and downloaded here . |
| mailjet | EU | Yes | newsletter tool | Inquiries at privacy@mailjet.com or on the contact page ( source ) |
| mail poet | EU | Not necessary | newsletter tool | According to support, no AV contract is provided. But it is not necessary if Mailpoet is operated on your own server. |
| mandrill | USA | Yes | newsletter tool | The Data Processing Addendum is part of the MailChimp Terms and Conditions and can be viewed here . |
| Manitou | Germany | Yes | web hosting | Can be downloaded here . |
| map box | USA | Yes | cards | Contact support |
| MasterTask | Germany | Yes | To do list | An AV contract with MeisterLabs can be concluded online in the customer account under Me > Policies . |
| Matomo (Innocraft) | New Zealand | Not necessary | Analytics | The data processing agreement for the cloud hosting offered by Innocraft for Matomo can be found here . |
| Matomo (self-hosted) | Own server | Not necessary | Analytics | As long as Matomo (formerly Piwik) is installed on your own server, you don’t need an AV contract. |
| micro payment | Germany | Yes | payment service provider | Can be completed here (must be logged in). |
| Microsoft (Office 365) | Worldwide (optionally also Germany ) | Yes | Office | Contract has been adapted to the GDPR and can be downloaded here (under Online Service Terms). |
| Maxcluster | Germany | Yes | web hosting | Can be downloaded in the customer area |
| MeisterLabs / Mindmeister | Germany | Yes | mind mapping | Contract can be generated here . |
| Mittwald | Germany | Yes | web hosting | Is available in the customer area. |
| mouseflow | USA / Denmark | Yes | Analytics | Data Processing Agreement (can be completed online) |
| namecheap | USA | Yes | web hosting | Contact support (AV contract) |
| netcup | Germany / Austria |
Yes | web hosting | Can be downloaded here . |
| nphoto | Poland | Yes | online printing company | Can be downloaded in the customer area. |
| ORC web hosting | different | Yes | web hosting | AV contract can be concluded in the customer center. |
| One.com | Worldwide | Yes | web hosting | Data Processor Agreement (PDF) Data Processing Agreement (PDF) |
| Austrian Post AG | Austria | Not necessary | shipping service provider | According to support, the Post and its customers are considered independent data controllers, so no contract is required. |
| OVH | Worldwide (location selectable) |
Yes | web hosting | OVH presents the contract in the Customer Center. After logging in, all you have to do is click on the corresponding link in the yellow information field and accept the contract. Or you can navigate via My services > My contracts – order processing contract and accept there. |
| Page4 | Germany | Yes | Website Builder | An agreement can be concluded online in the customer area. |
| paperwork | Germany | Yes | accounting | An agreement can now be viewed in the settings under Contract and tariff > Order processing (GDPR) . |
| PayPal | Worldwide | Not necessary | payment service provider | PayPal is a data controller and not a processor ( source ) |
| PicDrop | Germany | Yes | file sharing | Can be downloaded in the account settings (see this blog article for more information ). |
| Piwik PRO | US/EU | Yes | Analytics | Contact support. |
| postmark | USA | Yes | newsletter tool | You can find it in the customer area under Account > Data protection . |
| professional host | Germany | Yes | web hosting | Profihost provides an agreement for order data processing . However, only after booking a FlexServer. |
| RAIDBOXES | Germany | Yes | web hosting | You can find the AV contract including the technical and organizational measures (TOM) here . |
| Rainbow-Web.com | Germany / Paraguay | Yes | web hosting | Not necessary as a private customer or only for registered domains (without web hosting package). In the case of commercial use of a hosting package, the conclusion of an AV contract is mandatory. The ready-made AV contract can be found in the customer area. ( source ) |
| rapidmail | Germany | Yes | newsletter tool | You can find it in the customer area under Account > Data protection . |
| Run my accounts | Germany | Yes | accounting | Fill out the online form to download the AV contract |
| Digital room | Germany | Yes | online printing company | Agreement on order data processing can be filled out here . |
| Salesforce | Worldwide | Yes | CRM system | Data Processing Addendum (PDF) |
| Savvii | Netherlands | Yes | web hosting | DPA can be downloaded here . |
| SBG web hosting | Germany | Yes | web hosting | The AV contract can be requested by email to service@sbg-is.de. |
| black artist | Germany | Yes | web hosting | The AV contract is available on request by email. |
| scope vision | Germany | Yes | Other | Contract for order processing (PDF) |
| SendGrid | USA | Yes | newsletter tool | Can be requested here . |
| sendinblue | France | Yes | newsletter tool | To be found in the General Terms of Use . |
| SendMania | Germany | Yes | file sharing | AVV can be downloaded here . |
| Server4you | Germany | Yes | web hosting | AV contract is available on request from support. |
| server drome | Germany | Yes | web hosting | Contract for order processing (PDF) |
| server professionals | Germany | Yes | web hosting | Can be downloaded in the customer portal under the menu items Downloads, DSGVO, AV, Serverprofis AV contract or directly here . |
| Shopify | Canada and Ireland | Yes | Online shop system | Can be viewed here . |
| SiteGround | Worldwide | Yes | web hosting | Is part of the terms and conditions. Can be viewed here . |
| sipgate | Germany | Yes | telephony | Can be completed online here . |
| Slack | USA | Yes | collaborative | A Data Processing Addendum can be completed here . |
| Squarespace | USA | Yes | Website Builder | Data Processing Addendum (part of the General Terms and Conditions) |
| StackPath (MaxCDN) | Worldwide | Yes | CDN | Data Processing Addendum (can be completed online) |
| strato | Germany | Yes | web hosting | Is available in the customer area ( source ) |
| stripes | USA | Yes | payment service provider | Data Processing Addendum (login required) |
| Suleitec | Germany | Yes | web hosting | Inquire by email, telephone, contact form. |
| SummitCRM | Germany | Yes | CRM system | To be found in the General Terms of Use |
| SurveyMonkey | USA | Yes | Surveys & Forms | Can be requested here (but only for premium plans, not for free accounts). |
| t5 contents | Germany | Yes | Advertising | Contact support. |
| terraCLOUD | Germany | Yes | Cloud storage | Can be downloaded here . |
| appointment country | Germany | Yes | Appointment | AV contract is part of the General Terms and Conditions . |
| TelekomCLOUD | Germany | Yes | Cloud storage | All information can be found here . The published regulations automatically apply as supplementary conditions for the respective products. |
| teuto.net | Germany | Yes | web hosting | The contract for order processing can be viewed and concluded in the customer center . |
| Timme hosting | Germany | Yes | web hosting | All information can be found here . |
| TinyLetter | USA | Yes | newsletter tool | The Data Processing Addendum is part of the MailChimp Terms and Conditions and can be viewed here . |
| The Newsletter Plugin | own server | Not necessary | newsletter tool | According to developers not necessary. |
| Threema Work | Switzerland | Yes | collaborative | According to the FAQ, Threema does not require an order data processing agreement, but provides a standard agreement . |
| todoist | US (uses AWS) | Yes | To do list | Can be completed here . All information can be found here |
| Trello | USA | Yes | collaborative | Can be downloaded here . |
| twosteps | ? | Yes | web hosting | Contact support |
| type shape | EU | Yes | Surveys & Forms | DPA forms part of the Privacy Policy . |
| overspace | Germany | Yes | web hosting | DPA can be signed in the members area. |
| UD Media | Germany | Yes | web hosting | Can be completed here . |
| United Domains | Worldwide | Yes | web hosting | Send an email to support@ stating the customer number, there is the AV contract. |
| vizito | Belgium | Yes | Other | Received by email upon request. |
| Web Service4U | Germany | Yes | web hosting | Can be downloaded from the customer center under the DS-GVO menu item. |
| web gains | ? | Not necessary | Advertising | As an affiliate, you do not need an AV contract because Webgains says it is not a processor. |
| webgo | Germany | Yes | web hosting | Can be completed online via the customer area . |
| web host | Germany | Yes | web hosting | Can be downloaded here . |
| WebhostOne | Germany | Yes | web hosting | Is available in the customer control center . |
| webinars | ? | Yes | video conferencing | Can be filled out and signed in the account (see instructions ). |
| Webspace Sale | Germany | Yes | web hosting | All information can be found in the FAQ knowledge database . The AV contract can be downloaded directly here. |
| webtransfer | Netherlands and USA | Yes | file sharing | Can be requested by email. |
| Whereby | Norway | Not necessary | video conferencing | According to its own statements, it is the data controller and not a processor. |
| WishList Members | USA | Not necessary | Membership | Does not collect any data, therefore no AVV is necessary (own statement from the providers). |
| WLWP | Germany | Yes | web hosting | Order data processing (ADV) contract (login required) |
| wix | USA | Yes | Website Builder | Data Processing Agreement (is part of the terms and conditions and according to Wix does not have to be signed) |
| Cloudsafe | Germany | Yes | Cloud storage | AVV can be found in the appendix to the General Terms and Conditions . |
| WordFence | USA | Yes | Security | You will be informed of this during installation and you can download the AVV. You have to sign it and send it to the provider. |
| WordPress.com | USA | Yes | Website Builder | According to support, you can request a signed AV contract by email. However, not for the free version, only for the premium plans. |
| world4you | Austria | Yes | web hosting | Agreement on order processing can be downloaded and signed on my.world4you.com under User account > Personal data . A detailed FAQ can be found here . |
| WPengine | Great Britain | Yes | web hosting | Data Privacy Addendum (can be completed online) |
| Wufoo | Worldwide | Yes | Surveys & Forms | There is an AV contract for paying customers. You can request this from support. |
| miracle ruse | Germany | Not necessary | To do list | According to its own statements, the operator is the data controller and not a processor. |
| Germany | Not necessary | social network | According to support, XING does not act as a processor (with the exception of XING events, for which you should write to them if necessary). | |
| YArooms | Romania | Yes | video conferencing | You have to set the DPO/DSB in the admin panel and then ask for the DPA by email. |
| YouCanBook.me | Great Britain | Yes | Appointment | Agree to the declaration in the account, then you will receive a PDF to print out. It will be sent automatically to new accounts . |
| Zapier | EU | Yes | automation | Can be generated here . |
| zoom | USA | Yes | video conferencing | Ask your personal account executive (from Pro-Account). |
3.FAQs
Here you will find answers to frequently asked questions about AV contracts:
Thanks for the ideas you are sharing on this blog. Another thing I’d really like to say is the fact that getting hold of duplicates of your credit file in order to look at accuracy of each detail will be the first step you have to execute in credit restoration. You are looking to clean your credit file from harmful details mistakes that mess up your credit score.
I think other web site proprietors should take this website as an model, very clean and excellent user genial style and design, as well as the content. You’re an expert in this topic!