List of AV contracts: 200+ hosters, newsletter tools, etc. at a glance

 List of AV contracts: 200+ hosters, newsletter tools, etc. at a glance





As a blogger, website operator or online entrepreneur, you work with many different services, tools or apps that process personal data on behalf.

These include, for example, newsletter services , WordPress hosters , website construction kits , cloud services or accounting software.

With this list I would like to provide an overview of which providers offer a contract and where you can find it.

Additions are always welcome!


This blog post is not legal advice! As a blogger and WordPress expert, I have dealt intensively with applicable data protection law, but I am not a lawyer. Therefore, I cannot assume any liability for the completeness, topicality and correctness of the content provided by me.
Table of contents
  • 1. When do I need an AV contract?
  • 2. Table of AV Contracts
  • 3.FAQs

1. When do I need an AV contract?

Please note that you do not necessarily need an AV contract with every provider listed here, even if you use their services.

An order processing contract (AV contract/AVV for short), also order data processing contract (ADV contract) or data processing agreement (DPA), is always required when a company processes data on your behalf.

Here you will find a small overview of which services, tools and providers require you to conclude an AV contract and which do not:

✅ Need AV contract❌ Do not require an AV contract
• Web hoster
• WordPress hoster
• Website construction kits
• Newsletter services
• Online course platforms (cloud)
• CMS (cloud)
• Landing page software (cloud)
• Google Analytics & alternatives
• Shop systems (cloud)
• Cookie content Tools (Cloud)
• Cookie plugins (Cloud)
• External print service providers
• Archiving service providers
• Document shredding service providers
• Cloud storage
• CRM systems
• Accounting software
• AI text generators
• Cookie consent tools (self-hosted)
• Cookie plugins (self-hosted)
• Image databases
• Keyword tools
• WordPress shops (self-hosted)
• Amazon affiliate program
• Shop systems (self-hosted)
• Landing page software (Self Hosted)
• Online Course Platforms (Self Hosted)
• Membership Plugins (Self Hosted)
• LMS Plugins (Self Hosted)
• Google AdSense
• Affiliate Networks
• Tax advisors
• Lawyers
• Postal service providers

1.1 Data Controllers vs. Processors

Again, some service providers are data controllers rather than processors, meaning they determine the means and purposes of data processing, not you.

This is e.g. This is the case, for example, with Google Adsense or with affiliate networks such as AWIN or Webgains (if you are registered there as a publisher and not as an advertiser).

1.2 Exception: Use of external specialist services

Another exception is the "use of third-party specialist services" where data processing is not the main focus, such as:

  • Postal services for the transport of letters or parcels
  • Banking institutions for money transfer
  • Debt collection agencies with assignment of claims
  • Activities of persons subject to professional secrecy (tax consultants, lawyers, external company doctors, auditors)

The Bavarian State Office for Data Protection Supervision has compiled a detailed list of examples of processors and non-processors .

This article by Regina Stoiber also deals in detail with when it is a processor and when not .

In addition, I always recommend that you ask the support of a provider or look at their documentation to see whether they act as a processor or not.

2. Table of AV Contracts

serviceLocationAvailable?categoryRemarks
IONOS by 1 & 1EU/USYesweb hostingContract for order processing (PDF)
1bluGermanyYesweb hostingContract for order processing (PDF)
ActiveCampaignUSAYesnewsletter toolCan be downloaded here .
ad goalGermanyYesAdvertisingOrder processing contract (PDF)
General information on the GDPR
AdobeWorldwideYesOtherCan be requested here (DPA)
alpha hostingGermanyYesweb hostingCan be downloaded from the Customer Center -> Personal Data -> Order Processing. Then send the fully completed contract by email to avv@alfahosting.de.
algoliaWorldwideNot necessaryOtherAnnex Data Processing Addendum (PDF)
alldomains.hostingAustriaYesweb hostingCan be downloaded here .
all-inkl.comGermanyYesweb hostingCan be completed online in the Members Area under Master data > Order processing .
AmazonAWSWorldwideYesCloud storageCan be downloaded here . More information on compliance can be found here .
Atlasian CloudWorldwideYesCloud storageCan be downloaded here . (Data Processing Addendum DPA)
AWIN  EUNot necessaryAdvertisingAccording to their own statements , as an affiliate you do not need a contract with AWIN, since the networks do not act as processors.
bexioSwitzerlandYesCRM systemAppendix order processing to the General Terms and Conditions (PDF)
billbeeGermanyYesaccountingCan be completed here (must be logged in).
BillingEngineGermanyYesaccountingCan be downloaded here (access only for registered users).
bitpalaceGermanyYesweb hostingCan be downloaded here .
blogfosterEUYesAdvertisingOrder data processing contract is part of the newly revised General Terms and Conditions. It can be viewed here .
Blogger.comUSANoWebsite BuilderNo response from support, no official notification yet
bocomboGermanyYesweb hostingAV contract can be concluded online in the customer area in the Miscellaneous > Data protection tab .
CalendarUSAYesappointment processingCan be downloaded in the customer area.
CalensoSwitzerlandYesappointment processingOrder processing contract (PDF)
check domainWorldwideYesweb hostingCan be completed in the customer area. source )
CJ AffiliateUSANot necessaryAdvertisingYou don't need it as an affiliate because CJ says  it is not a processor.
clockinGermanyYestime trackingContact support.
Clever ElementsGermanyYesnewsletter toolCan be completed in the customer area ( source )
CleverReachEUYesnewsletter toolCan be downloaded in the customer area ( source )
clockodoGermanyYestime trackingCan be downloaded in the customer area ( source )
cloudflareWorldwideYesCDNCan be downloaded in the customer area. More information on compliance can be found here .
collmexGermanyYesaccountingCan be downloaded in the area here . (PDF)
ContaboGermanyYesweb hostingContact support
ConvertKitUSAYesnewsletter toolCan be requested here .
CyonSwitzerlandYesweb hostingCan be completed in the customer area according to this support document .
DATEVGermany?YesaccountingADV contracts can be requested here .
Digistore24GermanyNot necessarycourse platformSee the red box at the end of Lesson 4 .
DigitalOceanWorldwideYesCloud storageCan be viewed here .
Direct Mail for MacUSAYesnewsletter toolCan be downloaded here .
DiroHostGermanyYesweb hostingContact support
DogadoGermanyYesWeb hosting and cloud storageCan be requested in the customer center. Information about this here.
Domain & Webspace TremmelGermanyYesweb hostingCan be requested here .
DomainFactoryEUYesweb hostingAsk for support or download directly from the DomainFactory forms (point 16) on the website.
Domaintechnik.atAustriaYesweb hostingContract for order data processing (PDF), reseller version also
available.
do.deGermanyYesweb hostingCan be downloaded in the customer area.
DreamHostWorldwideYesweb hostingData Processing Addendum forms part of the general contract.
driftUSAYeschatbotsContact support ( source )
dripUSAYesnewsletter toolCan be downloaded here . (Data Processing Addendum DPA)
Drop boxUSAYesCloud storageYes, but only for business accounts. More information in the GDPR Guidance Center .
easybillGermanyYesaccountingCan be completed in the account under  Help > General Data Protection Regulation GDPR .
easy bookingAustriaYesAppointmentCan be downloaded here .
EclipsoGermanyYesMailboxAccording to the provider, an AV contract is automatically included in the business tariff.
edudipGermanyYescourse platformIs automatically issued when logging in as an academy owner. More information is available here .
eKomiWorldwideYesOtherCan be requested from customer support, will then be sent by email.
enerSpace web hostingGermanyYesweb hostingCan be downloaded here . (PDF). More information is available here
ESTUGOGermanyYesweb hostingContact support ( source ).
etrackerGermanyYesOtherCan be downloaded here .
EVANZOGermanyYesweb hostingAll information can be found in the FAQ . The AV contract can be downloaded directly here.
EventbriteUSAYesOtherData processing addendum  is available but not always necessary. Further information can be found in the FAQ on EU data protection .
EvernoteWorldwideYesOtherYou get the contract by request (for the free version and paid plans). For the Premium Plus Basic plan , the DPA can also be signed online .
FacebookUSAnot necessaryAdvertising, social networkFacebook is usually the data controller for users and advertisers, but is the processor for Custom Audiences, Measurements and Analytics and Workplace by Facebook ( source ).
FastBillGermanyYesaccountingAVV can be concluded directly online in the FastBill account.
fc-hosting.deGermanyYesweb hostingSend a message asking for an AV contract and naming the customer number. An AV contract is then sent to the email address provided by the customer.
financeAdsGermanyYesAdvertisingCan be completed online in the customer area.
flyer alertGermanyYesonline printing companyCan be requested from support and will be sent.
flywheelWorldwideYesweb hostingData Processing Addendum can be downloaded here .
FormAssemblyUSAYesSurveys & FormsData Processing Agreement can be downloaded here .
Photo Book Express24Germanynot necessaryonline printing companyFotobuchexpress24.de only expands the data protection declaration.
FreshdeskUSAYeshelpdeskAccording to the support forum, you get a contract by email on request.
full storyUSAYesAnalyticsCan be filled out here .
GetResponseWorldwideYesnewsletter toolContact support
Gmail,
Google Drive, etc.
USANoCloud storageGDPR compliance of the free services only possible by switching to GSuite .
GMXGermanyNoMailboxAccording to support, no AV contract is provided.
GN2GermanyYesweb hostingCan be requested from support.
GoneoGermanyYesweb hostingAccording to the help article, it is available under Downloads in the customer center .
Google AdSenseUSAnot necessaryAdvertisingGoogle and its customers are considered controllers independently of each other, so no ADV contract is required (source: notification of 03/29/2018).
Google AdWordsUSAYesAdvertisingYou can find it in the account settings
Google AnalyticsUSAYesAnalyticsCan be accepted according to the help article in the customer area. The addition to data processing can be found in the account settings ( read the instructions from Dr. Schwenke !).
Google Search ConsoleUSAnot necessaryAnalyticsNo personal data is transferred from the customer to Google.
Google Tag Manager USAYesAnalyticsThe Data Processing Addendum can be found under Administration > Account Settings > Data Processing Addendum .
Goolux24GermanyIn progresslead generationGoolux24 is in the process of implementing a contract.
GreatnetGermanyYesweb hostingAll information can be found in the FAQ . The AV contract can be downloaded directly here.
GSuite &
Google Cloud
USAYesEmail mailbox, cloud storageYou can find instructions on how to do this here .
HetznerEUYesweb hostingAccording to the data protection FAQ, ADV contracts are available in the customer area as an online form.
HostEuropeEUYesweb hostingCan be downloaded here .
HostGatorUSAYesweb hostingA Data Processing Agreement is included in HostGator's Terms of Service .
hosting.deGermanyYesweb hostingAn AV contract is stored in the customer center.
hostpressGermanyYesweb hostingContract for order data processing (PDF)
HotJarUSAYesAnalyticsData Processing Agreement
hPageMaltaYesWebsite BuilderCan be concluded online in the customer area in the user menu (top right) under user account > contract for order processing .
HubSpotUSAYesCRM systemData Processing Agreement
iNETsolutions.deGermanyYesweb hostingAV contracts can be downloaded via WebConfig (customer portal).
InLinkzGreeceYesOtherData Protection Addedum (PDF)
InternetWerkGermanyYesweb hostingAccording to this help article, an additional agreement on order processing can be downloaded from the customer login area.
INWXGermanyYesweb hostingA ready-made contract for order data processing can be downloaded in the customer area under customer data > downloads.
IP projectsGermanyYesweb hostingIs available in the customer area under the sub-item GDPR. source )
JimdoEUYesWebsite BuilderContract can be downloaded here .
JPBerlinGermanyYesE-mail box, web hostingThe contract can be concluded online in the account management under Account - Information > AV contract .
KeyCDNSwitzerlandYesCDNAccording to KeyCDN, an AV contract can be requested via support.
click tipEUYesnewsletter toolCan be taken out directly in the Klick-Tipp account (under My account > Order data processing )
LA web hostingGermanyYesweb hostingCan be downloaded in the customer area. source )
leadpagesUSAYeslead generationCan be downloaded in the customer area .
LexOfficeGermanyYesaccountingYou will be informed directly when you log in. Can be downloaded here .
Lima CityGermanyYesweb hostingCan be downloaded in the customer area (login required). info here .
LinkedInUSAYessocial networkSee here .
LogMeInUSAYesvideo conferencingLogMeIn includes services like GoToMeeting, GoToWebinar, Jive, and LastPass. Information on the GDPR and the Data Processing Addendum can be found here .
mailbox.orgGermanyYesMailboxCan be completed online in Account Management. info here .
mail.deGermanyYesMailboxAV contract is available for download in the settings area of ​​the webmailer.
mailchimpUSAYesnewsletter toolThe Data Processing Addendum is part of the MailChimp Terms and Conditions and can be viewed here .
MailifyEUYesnewsletter toolpart of the terms and conditions. Can be viewed here .
MailerLiteEUYesnewsletter toolCan be electronically signed and downloaded here .
mailjetEUYesnewsletter toolInquiries at privacy@mailjet.com or on the contact page ( source )
mail poetEUNot necessarynewsletter toolAccording to support, no AV contract is provided. But it is not necessary if Mailpoet is operated on your own server.
mandrillUSAYesnewsletter toolThe Data Processing Addendum is part of the MailChimp Terms and Conditions and can be viewed here .
ManitouGermanyYesweb hostingCan   be downloaded here .
map boxUSAYescardsContact support
MasterTaskGermanyYesTo do listAn AV contract with MeisterLabs can be concluded online in the customer account under Me > Policies .
Matomo (Innocraft)New ZealandNot necessaryAnalyticsThe data processing agreement for the cloud hosting offered by Innocraft for Matomo can be found here .
Matomo (self-hosted)Own serverNot necessaryAnalyticsAs long as Matomo (formerly Piwik) is installed on your own server, you don't need an AV contract.
micro paymentGermanyYespayment service providerCan be completed here (must be logged in).
Microsoft (Office 365)Worldwide (optionally also Germany )YesOfficeContract has been adapted to the GDPR and can be downloaded here (under Online Service Terms).
MaxclusterGermanyYesweb hostingCan be downloaded in the customer area
MeisterLabs / MindmeisterGermanyYesmind mappingContract can be generated here .
MittwaldGermanyYesweb hostingIs available in the customer area.
mouseflowUSA / DenmarkYesAnalyticsData Processing Agreement (can be completed online)
namecheapUSAYesweb hostingContact support (AV contract)
netcupGermany /
Austria
Yesweb hostingCan be downloaded here .
nphotoPolandYesonline printing companyCan be downloaded in the customer area.
ORC web hostingdifferentYesweb hostingAV contract can be concluded in the customer center.
One.comWorldwideYesweb hostingData Processor Agreement (PDF)
Data Processing Agreement (PDF)
Austrian Post AGAustriaNot necessaryshipping service providerAccording to support, the Post and its customers are considered independent data controllers, so no contract is required.
OVHWorldwide
(location selectable)
 Yesweb hostingOVH presents the contract in the Customer Center. After logging in, all you have to do is click on the corresponding link in the yellow information field and accept the contract. Or you can navigate via My services > My contracts - order processing contract and accept there.
Page4GermanyYesWebsite BuilderAn agreement can be concluded online in the customer area.
paperworkGermanyYesaccountingAn agreement can now be viewed in the settings under Contract and tariff > Order processing (GDPR) .
PayPalWorldwideNot necessarypayment service providerPayPal is a data controller and not a processor ( source )
PicDropGermanyYesfile sharingCan be downloaded in the account settings (see this blog article for more information ).
Piwik PROUS/EUYesAnalyticsContact support.
postmarkUSAYesnewsletter toolYou can find it in the customer area under Account > Data protection .
professional hostGermanyYesweb hostingProfihost provides an agreement for order data processing . However, only after booking a FlexServer.
RAIDBOXESGermanyYesweb hostingYou can find the AV contract including the technical and organizational measures (TOM) here .
Rainbow-Web.comGermany / ParaguayYesweb hostingNot necessary as a private customer or only for registered domains (without web hosting package). In the case of commercial use of a hosting package, the conclusion of an AV contract is mandatory. The ready-made AV contract can be found in the customer area. source )
rapidmailGermanyYesnewsletter toolYou can find it in the customer area under Account > Data protection .
Run my accountsGermanyYesaccountingFill out the online form to download the AV contract
Digital roomGermanyYesonline printing companyAgreement on order data processing can be filled out here .
SalesforceWorldwideYesCRM systemData Processing Addendum (PDF)
SavviiNetherlandsYesweb hostingDPA can be downloaded here .
SBG web hostingGermanyYesweb hostingThe AV contract can be requested by email to service@sbg-is.de.
black artistGermanyYesweb hostingThe AV contract is available on request by email.
scope visionGermanyYesOtherContract for order processing (PDF)
SendGridUSAYesnewsletter toolCan   be requested here .
sendinblueFranceYesnewsletter toolTo be found in the  General Terms of Use .
SendManiaGermanyYesfile sharingAVV can be downloaded here .
Server4youGermanyYesweb hostingAV contract is available on request from support.
server dromeGermanyYesweb hostingContract for order processing (PDF)
server professionalsGermanyYesweb hostingCan be downloaded in the customer portal under the menu items Downloads, DSGVO, AV, Serverprofis AV contract or directly here .
ShopifyCanada and IrelandYesOnline shop systemCan be viewed here .
SiteGroundWorldwideYesweb hostingIs part of the terms and conditions. Can be viewed here .
sipgateGermanyYestelephonyCan be completed online here .
SlackUSAYescollaborativeA Data Processing Addendum can be completed here .
SquarespaceUSAYesWebsite BuilderData Processing Addendum  (part of the General Terms and Conditions)
StackPath (MaxCDN)WorldwideYesCDNData Processing Addendum (can be completed online)
stratoGermanyYesweb hostingIs available in the customer area ( source )
stripesUSAYespayment service providerData Processing Addendum (login required)
SuleitecGermanyYesweb hostingInquire by email, telephone, contact form.
SummitCRMGermanyYesCRM systemTo be found in the General Terms of Use
SurveyMonkeyUSAYesSurveys & FormsCan be requested here (but only for premium plans, not for free accounts).
t5 contentsGermanyYesAdvertisingContact support.
terraCLOUDGermanyYesCloud storageCan be downloaded here .
appointment countryGermanyYesAppointmentAV contract is part  of the General Terms and Conditions .
TelekomCLOUDGermanyYesCloud storageAll information can be found here . The published regulations automatically apply as supplementary conditions for the respective products.
teuto.netGermanyYesweb hostingThe contract for order processing can be viewed and concluded in the customer center .
Timme hostingGermanyYesweb hostingAll information can be found here .
TinyLetterUSAYesnewsletter toolThe Data Processing Addendum is part of the MailChimp Terms and Conditions and can be viewed here .
The Newsletter Pluginown serverNot necessarynewsletter toolAccording to developers not necessary.
Threema WorkSwitzerlandYescollaborativeAccording to the FAQ, Threema does not require an order data processing agreement, but provides a standard agreement .
todoistUS (uses AWS)YesTo do listCan be completed here . All information can be found here
TrelloUSAYescollaborativeCan be downloaded here .
twosteps?Yesweb hostingContact support
type shapeEUYesSurveys & FormsDPA forms part of the Privacy Policy .
overspaceGermanyYesweb hostingDPA can be signed in the members area.
UD MediaGermanyYesweb hostingCan be completed here .
United DomainsWorldwideYesweb hostingSend an email to support@ stating the customer number, there is the AV contract.
vizitoBelgiumYesOtherReceived by email upon request.
Web Service4UGermanyYesweb hostingCan be downloaded from the customer center under the DS-GVO menu item.
web gains?Not necessaryAdvertisingAs an affiliate, you do not need an AV contract because Webgains says it  is not a processor.
webgoGermanyYesweb hostingCan be completed online via the customer area .
web hostGermanyYesweb hostingCan be downloaded here .
WebhostOneGermanyYesweb hostingIs available in the customer control center .
webinars?Yesvideo conferencingCan be filled out and signed in the account (see instructions ).
Webspace SaleGermanyYesweb hostingAll information can be found in the FAQ knowledge database . The AV contract can be downloaded directly here.
webtransferNetherlands and USAYesfile sharingCan be requested by email.
WherebyNorwayNot necessaryvideo conferencingAccording to its own statements, it is the data controller and not a processor.
WishList MembersUSANot necessaryMembershipDoes not collect any data, therefore no AVV is necessary (own statement from the providers).
WLWPGermanyYesweb hostingOrder data processing (ADV) contract (login required)
wixUSAYesWebsite BuilderData Processing Agreement (is part of the terms and conditions and according to Wix does not have to be signed)
CloudsafeGermanyYesCloud storageAVV can be found in the appendix to the General Terms and Conditions .
WordFenceUSAYesSecurityYou will be informed of this during installation and you can download the AVV. You have to sign it and send it to the provider.
WordPress.comUSAYesWebsite BuilderAccording to support, you can request a signed AV contract by email. However, not for the free version, only for the premium plans.
world4youAustriaYesweb hostingAgreement on order processing can be downloaded and signed on my.world4you.com under User account > Personal data . A detailed FAQ can be found here .
WPengineGreat BritainYesweb hostingData Privacy Addendum (can be completed online)
WufooWorldwideYesSurveys & FormsThere is an AV contract for paying customers. You can request this from support.
miracle ruseGermanyNot necessaryTo do listAccording to its own statements, the operator is the data controller and not a processor.
XINGGermanyNot necessarysocial networkAccording to support, XING does not act as a processor (with the exception of XING events, for which you should write to them if necessary).
YAroomsRomaniaYesvideo conferencingYou have to set the DPO/DSB in the admin panel and then ask for the DPA by email.
YouCanBook.meGreat BritainYesAppointmentAgree to the declaration in the account, then you will receive a PDF to print out. It will be sent automatically to new accounts  .
ZapierEUYesautomationCan be generated here .
zoomUSAYesvideo conferencingAsk your personal account executive (from Pro-Account).

3.FAQs

Here you will find answers to frequently asked questions about AV contracts:

What does AV contract mean in English?

In English it is called Data Processing Addendum or Data Processing Agreement , often abbreviated to DPA .

The Data Processer designates the order processor. The Data Controller is the data controller.

What is the difference between ADV and AV contract?

The difference is quite simple:

Order data processing for the collection, processing or use of personal data by a service provider on behalf of the person responsible (according to BDSG from 2009).

With the application of the GDPR on May 25, 2018, such service providers are referred to as processors (cf. Art. 28 GDPR) and the process accordingly as order processing (without the data in the middle).

Where can I read about processors in the GDPR?

Relevant articles in the GDPR are Art. 4, Art. 27, Art. 28, Art. 29, Art. 30, Art. 42, Art. 44, Art. 45, Art. 46, Art. 47 and Art. 82.

A comprehensive guide to order processing can also be found at the Bavarian State Commissioner for Data Protection .

What consequences can a missing AV contract have?

If an AV contract is missing, this can (possibly) be admonished.

In addition, the responsible data protection authority can impose a fine. So e.g. For example, at the end of 2018, a Hamburg company was fined €5,000 for not having an AV contract .

Is an AV contract enough to be on the safe side legally?

An AV contract is just one step on the way to GDPR compliance.

Additional steps may be required depending on the service or provider. To e.g. For example, to use Google Analytics in a legally secure manner on a website, you must add a passage to the data protection declaration, switch on IP anonymization and make various other settings. You may also need a cookie plugin to obtain user consent for data processing.

Powered by Blogger.