Data Processing Agreement
Version 1.0 - May 2026
Data Processing Agreement (DPA)
Between [Client Company Name] (hereinafter: "Data Controller") and TPTcheck.eu / ISIN2LEI B.V. (hereinafter: "Data Processor").
Article 1. Purposes of Processing
1.1 The Data Processor undertakes to process personal data and business data on behalf of the Data Controller under the conditions of this agreement.
1.2 The processing consists exclusively of the structural, logical, and substantive validation of uploaded financial reports (TPT files) on behalf of the Data Controller.
Article 2. Nature of Processing (In-Memory Processing)
2.1 The Data Processor maintains a strict 'Privacy by Design' policy. The files uploaded by the Data Controller (the "Data") are processed exclusively in the volatile working memory (RAM) of the servers.
2.2 The Data Processor shall never write, store, or back up the Data on physical or virtual storage media (hard drives, databases).
2.3 Immediately upon completion of the validation and generation of the return report, or upon termination of the user session, the Data is permanently and irrevocably destroyed from the working memory.
Article 3. Security
3.1 The Data Processor takes appropriate technical and organizational measures to secure the processing against loss or any form of unlawful processing (such as unauthorized access, impairment, or modification of the Data).
3.2 Data transport takes place exclusively over secure connections (HTTPS/SSL/TLS).
Article 4. Sub-processors
4.1 The Data Controller grants the Data Processor general authorization to use Vusam for hosting the application, provided that the physical servers are located within the European Economic Area (EEA).
4.2 For live validations of business identification numbers (such as LEI codes), the Data Processor utilizes the public API of the Global Legal Entity Identifier Foundation (GLEIF). No personal data is shared during this process.
Terms & Conditions
Version 1.0 - May 2026
Terms & Conditions (B2B)
Article 1. Applicability
These terms and conditions apply to all offers, subscriptions, and services of TPTcheck.eu (part of ISIN2LEI B.V.), provided to business clients.
Article 2. Execution of Services
2.1 TPTcheck.eu provides an automated software tool for the validation of TPT files. The service is provided on an "as-is" basis.
2.2 TPTcheck.eu performs the validations with the utmost care based on current market standards (such as ISO and NACE guidelines). However, the service constitutes a best-efforts obligation and expressly not an obligation of result. TPTcheck.eu does not guarantee that the tool will detect 100% of all conceivable errors or irregularities in a file.
Article 3. Client Responsibility
3.1 The client remains fully responsible at all times for the content, correctness, and timely delivery of reports to regulators, clients, or other third parties.
3.2 The client guarantees that they are authorized to have the uploaded data processed by TPTcheck.eu.
Article 4. Liability
4.1 The total liability of TPTcheck.eu due to an attributable failure in the performance of the subscription or through tort is limited to compensation for direct damages up to a maximum of the amount the client has paid to TPTcheck.eu (excluding VAT) in the twelve (12) months preceding the event causing the damage.
4.2 Liability of TPTcheck.eu for indirect damages, including consequential damages, lost profits, lost savings, reputational damage, and damages resulting from fines imposed by regulators, is fully excluded at all times.
Article 5. Subscriptions, Pricing, and Fair Use
5.1 Subscriptions are entered into for a period of one month and are tacitly renewed unless canceled at least 14 days before the end of the current term.
5.2 To ensure platform stability, a Fair Use Policy (FUP) applies to unlimited packages. In the event of extreme or automated data traffic that compromises server performance for other users, TPTcheck.eu reserves the right to temporarily restrict access.
Privacy Policy
Version 1.0 - May 2026
Privacy Policy
1. Who are we?
TPTcheck.eu is part of ISIN2LEI B.V., located at Spoorlaan 340, 5038 CC TILBURG, the Netherlands and registered with the Chamber of Commerce under number 81466919. We are the Data Controller for the processing of personal data as described in this policy.
2. What personal data do we process?
When you visit our website or create an account, we process the following data:
- Business email address
- Company name
- Payment details (processed securely via our external payment provider; we do not store credit card data ourselves)
- Technical data (IP address, login history for account security purposes)
The content of the TPT files you upload into our tool for validation is not stored. These files are processed exclusively in the working memory (RAM) and are immediately destroyed upon completion of the validation. For this specific processing, please refer to our Data Processing Agreement (DPA).
3. What do we use your data for?
- Creating and securing your account.
- Processing payments and invoicing.
- Providing technical support.
- Informing you about critical updates to the TPTcheck tool.
4. Retention Periods
We do not retain your personal data longer than strictly necessary. Account data is retained as long as you have an active subscription, and up to a maximum of 2 years after cancellation. Invoicing data is retained for 7 years due to legal administrative obligations (tax authorities).
5. Your Rights
You have the right to view, correct, or delete your personal data. Furthermore, you have the right to withdraw your consent for data processing or object to the processing of your personal data. You can send a request regarding these rights to info@isin2lei.eu.