All data that is stored in / uploaded on the PressPage platform by you, is data that is being processed by PressPage on behalf of you. When this data is personal data, it falls within the scope of the GDPR, and PressPage is the processor and you are the controller (as stated in the GDPR). Whenever such a relationship exists, the GDPR requires both parties to sign a data processing agreement (dpa), listing the obligations when processing these data.
Within the newsroom, I do not upload any personal data. Why do I still need to sign a data processing agreement (dpa)?
It is correct that in principle the releases and content are not considered to be personal data and thus do not fall within the scope of the GDPR. But when the release contains any information from which a data subject can be reduced (e.g. contact information, email address, phone number), this is considered personal information and a dpa is required.
The same goes for when our Contact Information module is used. With this module, personal information is uploaded, which is processed in our platform for you. As you can see, processing personal information is easily done, which is why we require to sign a dpa.
I am making use of PressPage Mail, do I need to sign a data processing agreement (dpa)?
With PressPage Mail there is no big difference, only the fact that we can say with full certainty that personal information is being processed by PressPage on your behalf (think of all the contact details uploaded in this tool). So, yes, a dpa needs to be signed.