Address book query without consent

When using the WhatsApp messenger in the standard and business versions, the contact information stored locally on the respective end devices is automatically transmitted to WhatsApp. This has been criticized by data protection authorities. When using the WhatsApp Business API, there is no need to use a WhatsApp application on a customer's end device. This means that there is no synchronization of contact data.

Data processing in the USA or outside the EU

When using Superchat, special attention is paid to ensuring that personal data is stored within Europe. Data transmitted via the WhatsApp Direct Cloud is stored in Frankfurt am Main, where we have activated Local Storage in Germany. We also place great importance on ensuring data processing within the European Union (EU) when selecting and using subcontractors. If this is not possible in individual cases, personal data is processed exclusively in countries for which there is an adequacy decision from the European Commission. For additional security, we have signed Standard Contractual Clauses (SCC) with all subcontractors outside the European Economic Area, which ensure an adequate level of data protection in case of revocation of the adequacy decision.

Is a data processing agreement (DPA) required?

Yes, we conclude a DPA with all companies that use the WhatsApp API through us, which complies with the current GDPR. The DPA is easy to apply for and will be sent to you by email within a few minutes. We have also concluded a DPA with our partner 360dialog, WhatsApp's official business solution partner.