}

List of AV contracts: 200+ hosters, newsletter tools, etc

List of AV contracts: 200+ hosters, newsletter tools, etc. at a glance

audio 7928262 1280 3


As a blogger, website operator or online entrepreneur, you work with many different services, tools or apps that process personal data on behalf.

These include, for example,newsletter services,WordPress hosters,website construction kits, cloud services or accounting software.

With this list I would like to provide an overview of which providers offer a contract and where you can find it.

Additions are always welcome!

This blog post is not legal advice!As a blogger and WordPress expert, I have dealt intensively with applicable data protection law, but I am not a lawyer.Therefore, I cannot assume any liability for the completeness, topicality and correctness of the content provided by me.
Table of contents
  • 1. When do I need an AV contract?
  • 2. Table of AV Contracts
  • 3.FAQs

1. When do I need an AV contract?

Please note that you do not necessarily need an AV contract with every provider listed here, even if you use their services.

An order processing contract (AV contract/AVV for short), also order data processing contract (ADV contract) or data processing agreement (DPA), is always required when a company processes data on your behalf.

Here you will find a small overview of which services, tools and providers require you to conclude an AV contract and which do not:

✅ Need AV contract❌ Donotrequire an AV contract
Web hoster
WordPress hoster
Website construction kits
Newsletter services
Online course platforms(cloud)
CMS(cloud)
Landing page software(cloud)
Google Analytics & alternatives
Shop systems(cloud)
Cookie content Tools(Cloud)
Cookie plugins(Cloud)
• External print service providers
• Archiving service providers
• Document shredding service providers
• Cloud storage
• CRM systems
• Accounting software
AI text generators
Cookie consent tools(self-hosted)
Cookie plugins(self-hosted)
Image databases
Keyword tools
WordPress shops(self-hosted)
Amazon affiliate program
Shop systems(self-hosted)
Landing page software(Self Hosted)
Online Course Platforms(Self Hosted)
Membership Plugins(Self Hosted)
LMS Plugins(Self Hosted)
• Google AdSense
• Affiliate Networks
• Tax advisors
• Lawyers
• Postal service providers

1.1 Data Controllers vs. Processors

Again, some service providers aredata controllersrather than processors, meaning they determine the means and purposes of data processing, not you.

This is e.g.This is the case, for example, with Google Adsense or with affiliate networks such as AWIN or Webgains (if you are registered there as a publisher and not as an advertiser).

1.2 Exception: Use of external specialist services

Another exception is the “use of third-party specialist services” where data processing is not the main focus, such as:

  • Postal services for the transport of letters or parcels
  • Banking institutions for money transfer
  • Debt collection agencies with assignment of claims
  • Activities of persons subject to professional secrecy (tax consultants, lawyers, external company doctors, auditors)

The Bavarian State Office for Data Protection Supervisionhas compiled a detailed list of examples of processors and non-processors.

This articleby Regina Stoiberalso deals in detail with when it is a processor and when not .

In addition, I always recommend that you ask the support of a provider or look at their documentation to see whether they act as a processor or not.

2. Table of AV Contracts

serviceLocationAvailable?categoryRemarks
IONOS by 1 & 1EU/USYesweb hostingContract for order processing(PDF)
1bluGermanyYesweb hostingContract for order processing(PDF)
ActiveCampaignUSAYesnewsletter toolCanbe downloadedhere .
ad goalGermanyYesAdvertisingOrder processing contract(PDF)
General information on the GDPR
AdobeWorldwideYesOtherCanbe requestedhere (DPA)
alpha hostingGermanyYesweb hostingCan be downloaded from the Customer Center -> Personal Data -> Order Processing.Then send the fully completed contract by email to avv@alfahosting.de.
algoliaWorldwideNot necessaryOtherAnnex Data Processing Addendum(PDF)
alldomains.hostingAustriaYesweb hostingCanbe downloadedhere .
all-inkl.comGermanyYesweb hostingCan be completed online in theMembers AreaunderMaster data > Order processing.
AmazonAWSWorldwideYesCloud storageCanbe downloadedhere .More information on compliance can be foundhere.
Atlasian CloudWorldwideYesCloud storageCanbe downloadedhere .(Data Processing Addendum DPA)
AWINEUNot necessaryAdvertisingAccording totheir own statements, as an affiliate you do not need a contract with AWIN, since the networks do not act as processors.
bexioSwitzerlandYesCRM systemAppendix order processing to the General Terms and Conditions(PDF)
billbeeGermanyYesaccountingCan be completedhere(must be logged in).
BillingEngineGermanyYesaccountingCanbe downloadedhere (access only for registered users).
bitpalaceGermanyYesweb hostingCanbe downloadedhere .
blogfosterEUYesAdvertisingOrder data processing contract is part of the newly revised General Terms and Conditions.It can be viewedhere.
Blogger.comUSANoWebsite BuilderNo response from support, no official notification yet
bocomboGermanyYesweb hostingAV contract can be concluded online in thecustomer areain theMiscellaneous > Data protectiontab .
CalendarUSAYesappointment processingCan be downloaded in the customer area.
CalensoSwitzerlandYesappointment processingOrder processing contract(PDF)
check domainWorldwideYesweb hostingCan be completed in the customer area.(source)
CJ AffiliateUSANot necessaryAdvertisingYou don’t need it as an affiliate because CJ saysitis not a processor.
clockinGermanyYestime trackingContact support.
Clever ElementsGermanyYesnewsletter toolCan be completed in the customer area (source)
CleverReachEUYesnewsletter toolCan be downloaded in the customer area (source)
clockodoGermanyYestime trackingCan be downloaded in the customer area (source)
cloudflareWorldwideYesCDNCan be downloaded in the customer area.More information on compliance can be foundhere.
collmexGermanyYesaccountingCan be downloadedin the areahere .(PDF)
ContaboGermanyYesweb hostingContact support
ConvertKitUSAYesnewsletter toolCanbe requestedhere .
CyonSwitzerlandYesweb hostingCanbe completed in the customer areaaccording to this support document .
DATEVGermany?YesaccountingADV contracts canbe requestedhere .
Digistore24GermanyNot necessarycourse platformSee the red boxat the end of Lesson 4.
DigitalOceanWorldwideYesCloud storageCanbe viewedhere .
Direct Mail for MacUSAYesnewsletter toolCanbe downloadedhere .
DiroHostGermanyYesweb hostingContact support
DogadoGermanyYesWeb hosting and cloud storageCan be requested in the customer center.Information about thishere.
Domain & Webspace TremmelGermanyYesweb hostingCanbe requestedhere .
DomainFactoryEUYesweb hostingAsk for support or download directly from theDomainFactory forms(point 16) on the website.
Domaintechnik.atAustriaYesweb hostingContract for order data processing(PDF), reseller version also
available.
do.deGermanyYesweb hostingCan be downloaded in the customer area.
DreamHostWorldwideYesweb hostingData Processing Addendumforms part of the general contract.
driftUSAYeschatbotsContact support (source)
dripUSAYesnewsletter toolCanbe downloadedhere .(Data Processing Addendum DPA)
Drop boxUSAYesCloud storageYes, but only for business accounts.More information in theGDPR Guidance Center.
easybillGermanyYesaccountingCan be completedin the account underHelp > General Data Protection Regulation GDPR .
easy bookingAustriaYesAppointmentCanbe downloadedhere .
EclipsoGermanyYesMailboxAccording to the provider, an AV contract is automatically included in the business tariff.
edudipGermanyYescourse platformIs automatically issued when logging in as an academy owner.More information is availablehere.
eKomiWorldwideYesOtherCan be requested from customer support, will then be sent by email.
enerSpace web hostingGermanyYesweb hostingCanbe downloadedhere .(PDF).More information is availablehere
ESTUGOGermanyYesweb hostingContact support (source).
etrackerGermanyYesOtherCanbe downloadedhere .
EVANZOGermanyYesweb hostingAll information canbe found in theFAQ .The AV contract can be downloaded directly here.
EventbriteUSAYesOtherData processing addendumis available but not always necessary.Further information can be found in theFAQ on EU data protection.
EvernoteWorldwideYesOtherYou get the contract by request (for the free version and paid plans).For thePremium Plus Basicplan , the DPA can alsobe signed online.
FacebookUSAnot necessaryAdvertising, social networkFacebook is usually the data controller for users and advertisers, but is the processor for Custom Audiences, Measurements and Analytics and Workplace by Facebook (source).
FastBillGermanyYesaccountingAVV can be concluded directly online in the FastBill account.
fc-hosting.deGermanyYesweb hostingSend a messageasking for an AV contract and naming the customer number.An AV contract is then sent to the email address provided by the customer.
financeAdsGermanyYesAdvertisingCan be completed online in the customer area.
flyer alertGermanyYesonline printing companyCan be requested from support and will be sent.
flywheelWorldwideYesweb hostingData Processing Addendum canbe downloadedhere .
FormAssemblyUSAYesSurveys & FormsData Processing Agreement canbe downloadedhere .
Photo Book Express24Germanynot necessaryonline printing companyFotobuchexpress24.de only expands the data protection declaration.
FreshdeskUSAYeshelpdeskAccording to the support forum,you get a contract by email on request.
full storyUSAYesAnalyticsCan be filled outhere.
GetResponseWorldwideYesnewsletter toolContact support
Gmail,
Google Drive, etc.
USANoCloud storageGDPR compliance of the free services only possible by switching toGSuite.
GMXGermanyNoMailboxAccording to support,no AV contract is provided.
GN2GermanyYesweb hostingCan be requested from support.
GoneoGermanyYesweb hostingAccording to the help article,it is availableunderDownloadsin the customer center .
Google AdSenseUSAnot necessaryAdvertisingGoogle and its customers are considered controllers independently of each other, so no ADV contract is required (source: notification of 03/29/2018).
Google AdWordsUSAYesAdvertisingYou can find it in the account settings
Google AnalyticsUSAYesAnalyticsCanbe accepted according tothe help article in the customer area.The addition to data processing can be found in the account settings ( readthe instructions from Dr. Schwenke!).
Google Search ConsoleUSAnot necessaryAnalyticsNo personal data is transferred from the customer to Google.
Google Tag ManagerUSAYesAnalyticsThe Data Processing Addendum can be found underAdministration > Account Settings > Data Processing Addendum.
Goolux24GermanyIn progresslead generationGoolux24 is in the process of implementing a contract.
GreatnetGermanyYesweb hostingAll information canbe found in theFAQ .The AV contract can be downloaded directly here.
GSuite &
Google Cloud
USAYesEmail mailbox, cloud storageYou can find instructions on how to do thishere .
HetznerEUYesweb hostingAccording tothe data protection FAQ,ADV contracts are availablein the customer areaas an online form.
HostEuropeEUYesweb hostingCanbe downloadedhere .
HostGatorUSAYesweb hostingA Data Processing Agreement is includedin HostGator’s Terms of Service.
hosting.deGermanyYesweb hostingAn AV contract is stored in the customer center.
hostpressGermanyYesweb hostingContract for order data processing(PDF)
HotJarUSAYesAnalyticsData Processing Agreement
hPageMaltaYesWebsite BuilderCan be concluded onlinein the customer area in the user menu (top right) underuser account > contract for order processing .
HubSpotUSAYesCRM systemData Processing Agreement
iNETsolutions.deGermanyYesweb hostingAV contracts can be downloaded via WebConfig (customer portal).
InLinkzGreeceYesOtherData Protection Addedum(PDF)
InternetWerkGermanyYesweb hostingAccording tothis help article,an additional agreement on order processing can be downloaded from the customer login area.
INWXGermanyYesweb hostingA ready-made contract for order data processing can be downloaded in the customer area under customer data > downloads.
IP projectsGermanyYesweb hostingIs available in the customer area under the sub-item GDPR.(source)
JimdoEUYesWebsite BuilderContract canbe downloadedhere .
JPBerlinGermanyYesE-mail box, web hostingThe contract can be concludedonline in theaccount managementunderAccount – Information > AV contract .
KeyCDNSwitzerlandYesCDNAccording to KeyCDN,an AV contract can be requested via support.
click tipEUYesnewsletter toolCan be taken out directly in the Klick-Tipp account (underMy account > Order data processing)
LA web hostingGermanyYesweb hostingCan be downloaded in the customer area.(source)
leadpagesUSAYeslead generationCanbe downloadedin the customer area .
LexOfficeGermanyYesaccountingYou will be informed directly when you log in.Canbe downloadedhere .
Lima CityGermanyYesweb hostingCan be downloaded in the customer area (login required).infohere.
LinkedInUSAYessocial networkSeehere.
LogMeInUSAYesvideo conferencingLogMeIn includes services like GoToMeeting, GoToWebinar, Jive, and LastPass.Information on the GDPR and the Data Processing Addendum can be foundhere.
mailbox.orgGermanyYesMailboxCan be completed online in Account Management.infohere.
mail.deGermanyYesMailboxAV contract is available for download in the settings area of ​​the webmailer.
mailchimpUSAYesnewsletter toolThe Data Processing Addendum is part of the MailChimp Terms and Conditions and canbe viewedhere .
MailifyEUYesnewsletter toolpart of the terms and conditions.Canbe viewedhere .
MailerLiteEUYesnewsletter toolCanbe electronically signed and downloadedhere .
mailjetEUYesnewsletter toolInquiries atprivacy@mailjet.comor on thecontact page(source)
mail poetEUNot necessarynewsletter toolAccording to support, no AV contract is provided.But it is not necessary if Mailpoet is operated on your own server.
mandrillUSAYesnewsletter toolThe Data Processing Addendum is part of the MailChimp Terms and Conditions and canbe viewedhere .
ManitouGermanyYesweb hostingCanbe downloadedhere .
map boxUSAYescardsContact support
MasterTaskGermanyYesTo do listAn AV contract with MeisterLabs canbe concluded online in the customer account underMe > Policies .
Matomo (Innocraft)New ZealandNot necessaryAnalyticsThe data processing agreement for the cloud hosting offered by Innocraft for Matomo can befoundhere .
Matomo (self-hosted)Own serverNot necessaryAnalyticsAs long as Matomo (formerly Piwik) is installed on your own server, you don’t need an AV contract.
micro paymentGermanyYespayment service providerCan be completedhere(must be logged in).
Microsoft (Office 365)Worldwide (optionally alsoGermany)YesOfficeContract has been adapted to the GDPR and canbe downloadedhere (under Online Service Terms).
MaxclusterGermanyYesweb hostingCan be downloaded in the customer area
MeisterLabs / MindmeisterGermanyYesmind mappingContract canbe generatedhere .
MittwaldGermanyYesweb hostingIs available in the customer area.
mouseflowUSA / DenmarkYesAnalyticsData Processing Agreement(can be completed online)
namecheapUSAYesweb hostingContact support (AV contract)
netcupGermany /
Austria
Yesweb hostingCanbe downloadedhere .
nphotoPolandYesonline printing companyCan be downloaded in the customer area.
ORC web hostingdifferentYesweb hostingAV contract can be concluded in the customer center.
One.comWorldwideYesweb hostingData Processor Agreement(PDF)
Data Processing Agreement(PDF)
Austrian Post AGAustriaNot necessaryshipping service providerAccording to support, the Post and its customers are considered independent data controllers, so no contract is required.
OVHWorldwide
(location selectable)
Yesweb hostingOVH presents the contract in the Customer Center.After logging in, all you have to do is click on the corresponding link in the yellow information field and accept the contract.Or you can navigate viaMy services > My contracts – order processing contractand accept there.
Page4GermanyYesWebsite BuilderAn agreement can be concluded online in the customer area.
paperworkGermanyYesaccountingAn agreement can now be viewedin the settings underContract and tariff > Order processing (GDPR) .
PayPalWorldwideNot necessarypayment service providerPayPal is a data controller and not a processor (source)
PicDropGermanyYesfile sharingCan be downloaded in the account settings (seethis blog articlefor more information ).
Piwik PROUS/EUYesAnalyticsContact support.
postmarkUSAYesnewsletter toolYou can find it in the customer area underAccount > Data protection.
professional hostGermanyYesweb hostingProfihost provides anagreement for order data processing.However, only after booking a FlexServer.
RAIDBOXESGermanyYesweb hostingYou can find the AV contract including the technical and organizational measures (TOM)here.
Rainbow-Web.comGermany / ParaguayYesweb hostingNot necessary as a private customer or only for registered domains (without web hosting package).In the case of commercial use of a hosting package, the conclusion of an AV contract is mandatory.The ready-made AV contract can be found in the customer area.(source)
rapidmailGermanyYesnewsletter toolYou can find it in the customer area underAccount > Data protection.
Run my accountsGermanyYesaccountingFill out the online formto download the AV contract
Digital roomGermanyYesonline printing companyAgreement on order data processing can be filled outhere.
SalesforceWorldwideYesCRM systemData Processing Addendum(PDF)
SavviiNetherlandsYesweb hostingDPA canbe downloadedhere .
SBG web hostingGermanyYesweb hostingThe AV contract can be requested by email to service@sbg-is.de.
black artistGermanyYesweb hostingThe AV contract is available on request by email.
scope visionGermanyYesOtherContract for order processing(PDF)
SendGridUSAYesnewsletter toolCanbe requestedhere .
sendinblueFranceYesnewsletter toolTo be found in theGeneral Terms of Use.
SendManiaGermanyYesfile sharingAVV canbe downloadedhere .
Server4youGermanyYesweb hostingAV contract is available on request from support.
server dromeGermanyYesweb hostingContract for order processing(PDF)
server professionalsGermanyYesweb hostingCan be downloadedin the customer portal under the menu items Downloads, DSGVO, AV, Serverprofis AV contract or directlyhere .
ShopifyCanada and IrelandYesOnline shop systemCanbe viewedhere .
SiteGroundWorldwideYesweb hostingIs part of the terms and conditions.Canbe viewedhere .
sipgateGermanyYestelephonyCanbe completed onlinehere .
SlackUSAYescollaborativeA Data Processing Addendum canbe completedhere .
SquarespaceUSAYesWebsite BuilderData Processing Addendum(part of the General Terms and Conditions)
StackPath (MaxCDN)WorldwideYesCDNData Processing Addendum(can be completed online)
stratoGermanyYesweb hostingIs available in the customer area (source)
stripesUSAYespayment service providerData Processing Addendum(login required)
SuleitecGermanyYesweb hostingInquire by email, telephone, contact form.
SummitCRMGermanyYesCRM systemTo be found in theGeneral Terms of Use
SurveyMonkeyUSAYesSurveys & FormsCan be requestedhere(but only for premium plans, not for free accounts).
t5 contentsGermanyYesAdvertisingContact support.
terraCLOUDGermanyYesCloud storageCanbe downloadedhere .
appointment countryGermanyYesAppointmentAV contract is partof the General Terms and Conditions.
TelekomCLOUDGermanyYesCloud storageAll information canbe foundhere .The published regulations automatically apply as supplementary conditions for the respective products.
teuto.netGermanyYesweb hostingThe contract for order processing canbe viewed and concluded in thecustomer center .
Timme hostingGermanyYesweb hostingAll information canbe foundhere .
TinyLetterUSAYesnewsletter toolThe Data Processing Addendum is part of theMailChimpTerms and Conditionsand can be viewedhere .
The Newsletter Pluginown serverNot necessarynewsletter toolAccording to developersnot necessary.
Threema WorkSwitzerlandYescollaborativeAccording tothe FAQ,Threema does not require an order data processing agreement, but provides astandard agreement.
todoistUS (uses AWS)YesTo do listCanbe completedhere .All information canbe foundhere
TrelloUSAYescollaborativeCanbe downloadedhere .
twosteps?Yesweb hostingContact support
type shapeEUYesSurveys & FormsDPA forms part of thePrivacyPolicy .
overspaceGermanyYesweb hostingDPAcan be signed in the members area.
UD MediaGermanyYesweb hostingCanbe completedhere .
United DomainsWorldwideYesweb hostingSend an email to support@ stating the customer number, there is the AV contract.
vizitoBelgiumYesOtherReceived by email upon request.
Web Service4UGermanyYesweb hostingCanbe downloaded from thecustomer centerunder theDS-GVO menu item.
web gains?Not necessaryAdvertisingAs an affiliate, you do not need an AV contract because Webgains says itisnot a processor.
webgoGermanyYesweb hostingCanbe completed onlinevia the customer area .
web hostGermanyYesweb hostingCanbe downloadedhere .
WebhostOneGermanyYesweb hostingIsavailablein the customer control center .
webinars?Yesvideo conferencingCan be filled out and signed in the account (seeinstructions).
Webspace SaleGermanyYesweb hostingAll information canbe found in theFAQ knowledge database .The AV contract can be downloaded directly here.
webtransferNetherlands and USAYesfile sharingCan be requested by email.
WherebyNorwayNot necessaryvideo conferencingAccording to its own statements,it isthe data controller and not a processor.
WishList MembersUSANot necessaryMembershipDoes not collect any data, therefore no AVV is necessary (own statement from the providers).
WLWPGermanyYesweb hostingOrder data processing (ADV) contract(login required)
wixUSAYesWebsite BuilderData Processing Agreement(is part of the terms and conditions and according to Wix does not have to be signed)
CloudsafeGermanyYesCloud storageAVV can be foundin theappendix to the General Terms and Conditions .
WordFenceUSAYesSecurityYou will be informed of this during installation and you can download the AVV.You have to sign it and send it to the provider.
WordPress.comUSAYesWebsite BuilderAccording to support,you can request a signed AV contractby email.However, not for the free version, only for the premium plans.
world4youAustriaYesweb hostingAgreement on order processing canbe downloaded and signed onmy.world4you.comunderUser account > Personal data .A detailed FAQ can be foundhere.
WPengineGreat BritainYesweb hostingData Privacy Addendum(can be completed online)
WufooWorldwideYesSurveys & FormsThere is an AV contract for paying customers.You can request this from support.
miracle ruseGermanyNot necessaryTo do listAccording to its own statements,the operator isthe data controller and not a processor.
XINGGermanyNot necessarysocial networkAccording to support, XING does not act as a processor (with the exception of XING events, for which you should write to them if necessary).
YAroomsRomaniaYesvideo conferencingYou have to set the DPO/DSB in the admin panel and then ask for the DPA by email.
YouCanBook.meGreat BritainYesAppointmentAgree to the declaration in the account, then you will receive a PDF to print out.It will be sent automaticallyto new accounts.
ZapierEUYesautomationCanbe generatedhere .
zoomUSAYesvideo conferencingAsk your personal account executive (from Pro-Account).

3.FAQs

Here you will find answers to frequently asked questions about AV contracts:

What does AV contract mean in English?

In English it is calledData Processing AddendumorData Processing Agreement, often abbreviated toDPA.

TheData Processerdesignates the order processor.TheData Controlleris the data controller.

What is the difference between ADV and AV contract?

The difference is quite simple:

Orderdataprocessing for thecollection, processing or use of personal data by a service provider on behalf of the person responsible (according to BDSG from 2009).

With the application of the GDPR on May 25, 2018, such service providers are referred to as processors (cf. Art. 28 GDPR) and the process accordingly as order processing (without the data in the middle).

Where can I read about processors in the GDPR?

Relevant articles in the GDPR are Art. 4, Art. 27, Art. 28, Art. 29, Art. 30, Art. 42, Art. 44, Art. 45, Art. 46, Art. 47 and Art. 82.

A comprehensive guide to order processing can alsobe found at the Bavarian State Commissioner for Data Protection.

What consequences can a missing AV contract have?

If an AV contract is missing, this can (possibly) be admonished.

In addition, the responsible data protection authority can impose a fine.So e.g.For example, at the end of 2018, a Hamburg company was fined €5,000for not having an AV contract.

Is an AV contract enough to be on the safe side legally?

An AV contract is just one step on the way to GDPR compliance.

Additional steps may be required depending on the service or provider.To e.g.For example, to use Google Analytics in a legally secure manner on a website, you must add a passage to the data protection declaration, switch on IP anonymization and make various other settings.You may also needa cookie pluginto obtain user consent for data processing.

Leave a Comment

Your email address will not be published. Required fields are marked *

Scroll to Top