<aside> 👋

This Data Processing Agreement (“DPA”) forms part of any agreement between Radish B.V. (“Processor”) and its clients (“Controller”) whenever personal data is processed on the client’s behalf, in accordance with the EU General Data Protection Regulation (GDPR – EU 2016/679).

Last updated: June 2025

</aside>

1. Roles and Scope

• Controller: The client receiving research services
• Processor: Radish B.V., Wilhelminastraat 129B, 1054 WB Amsterdam, Netherlands
• This DPA applies only when Radish B.V. processes personal data as part of a research engagement.

2. Purpose of Processing

Radish B.V. processes personal data solely to deliver qualitative research services, such as participant recruitment, interviews, analysis, and reporting.

3. Types of Personal Data

Depending on the engagement, Radish B.V. may process:

• Contact information: name, email, phone number
• Demographic information: age, gender, role, location
• Qualitative data: feedback, opinions, and behaviors shared during research sessions

4. Categories of Data Subjects

• End users, customers, or prospective customers of the client who participate in research

5. Responsibilities of Radish B.V. (Processor)

Radish B.V. will:

• Process data only on the client’s written instructions
• Keep data confidential and limit access to authorized personnel
• Implement appropriate technical and organizational security measures
• Assist the client in fulfilling GDPR obligations (e.g. access, deletion requests)