Data processing agreement (DPA)

Last updated : 2026-09-29

This data processing agreement (the "DPA") is entered into under Article 28 of the General Data Protection Regulation (EU 2016/679, the "GDPR"). It forms part of the Terms of service and is accepted together with them.

1. Parties and roles

• The user is the controller of the data they collect with outsend. They decide the purposes and essential means of their processing.
• LOCKLEAD, publisher of outsend (LOCKLEAD, a French simplified joint-stock company (SAS) with a share capital of €500, Paris Trade and Companies Register no. 995 260 130, 53 rue du Cardinal Lemoine, 75005 Paris, France), acts as a processor on behalf of the user.

LOCKLEAD remains the controller of its own data (account, correspondence, security, audience measurement). This processing is described in the Privacy policy and is not covered by this agreement.

2. Subject matter, nature and purpose

LOCKLEAD processes the data to provide the outsend service to the user, at the user's request: collection of publicly available business data, enrichment, verification, filtering, storage, export and monitoring.

3. Categories of data and data subjects

Data processed: business contact details of establishments (name, address, phone, email address, website, company identifiers) and, where applicable, of their professional contacts (name, role, business contact details).

Data subjects: the establishments, and their professional contacts, that the user chooses to search for.

4. Duration

The data is processed for as long as the user's account exists. The user decides how long it is kept and can delete it at any time. When the account is deleted, the data collected by the user is deleted. What is kept after deletion, and for how long, is described in the Privacy policy.

5. LOCKLEAD's commitments

LOCKLEAD undertakes to:

• process the data only on the user's documented instructions; these instructions are the user's settings and actions in the service;
• inform the user if an instruction appears to infringe the GDPR;
• ensure that the persons authorised to process the data are bound by confidentiality;
• implement appropriate technical and organisational measures to protect the data;
• assist the user, as far as possible, in responding to requests from data subjects exercising their rights;
• notify the user of any personal data breach without undue delay after becoming aware of it;
• delete the data when the account is deleted, unless a legal retention obligation applies;
• make available to the user the information needed to demonstrate compliance with this agreement, and allow audits upon reasonable request.

6. Sub-processors

The user authorises LOCKLEAD to use sub-processors to provide the service. Their list, and any transfers outside the European Union, are set out in the "Recipients" section of the Privacy policy. LOCKLEAD imposes on them data protection obligations equivalent to those of this agreement. Any addition or replacement is announced by updating that list; the user can object from the Contact page or by deleting their account.

7. User's commitments

The user undertakes to:

• have a legal basis for each processing operation they carry out with outsend;
• inform data subjects and respect their rights, including their right to object;
• give LOCKLEAD only instructions that comply with the GDPR;
• comply with the rules that apply to commercial prospecting (GDPR, e-Privacy rules, CNIL recommendations).

8. Acceptance and term of the agreement

This agreement is accepted together with the Terms of service, when the account is created or when a new version of the terms is accepted. It applies for as long as the account exists.

9. Contact

For any question about this agreement, write to us from the Contact page.