Legal
Data Processing Agreement (DPA)
Last updated June 1, 2026
Summary of the processing agreement under Article 28 GDPR. The full, signable contractual version is available on request.
Roles
For data you collect via the service, you are the controller and ScrapeNest is the processor. ScrapeNest processes such data only on your documented instructions.
Subject matter and duration
Processing covers the execution of collection jobs and the provision of artifacts, for the duration of the contract.
Processor obligations
- Process data only on documented instructions.
- Ensure the confidentiality of authorized personnel.
- Implement appropriate security measures (Art. 32).
- Assist with data-subject requests and impact assessments.
- Delete or return data at the end of the contract, at your choice.
- Allow and contribute to audits.
Sub-processors
ScrapeNest may use sub-processors under equivalent obligations. The current list is available on request at privacy@scrapenest.com and changes are notified.
Location and transfers
Data is hosted in the European Union. Any transfer outside the EU would be covered by appropriate safeguards.
Get the signed DPA
To receive the full, signable DPA and the sub-processor list, email privacy@scrapenest.com.