Base sp. z o. o.: DPA, subprocessors and transfers

What to put in your subprocessor list

A ready row. Replace the purpose with what your client actually uses Base sp. z o. o. for.

Questions people ask about Base sp. z o. o.

Where is Base sp. z o. o.'s DPA?

Base sp. z o. o. publishes its customer data processing agreement at https://www.zendesk.com/company/data-processing-agreement/. We last opened that link on 5 October 2026.

Is Base sp. z o. o.'s DPA the same thing as a data processing addendum?

Yes. A data processing agreement and a data processing addendum are two names for the document Article 28 of the GDPR requires between a controller and a processor; vendors use both, and some call it processor terms. What it has to contain does not change with the name. Base sp. z o. o.'s is at https://www.zendesk.com/company/data-processing-agreement/.

Where is Base sp. z o. o.'s sub-processor list?

Base sp. z o. o. publishes the list of its own sub-processors at https://support.zendesk.com/hc/en-us/articles/4408883061530-Sub-processor-Policy. We last opened that link on 5 October 2026.

Does sending personal data to Base sp. z o. o. count as a transfer out of the EEA?

No. Base sp. z o. o. is registered in Poland, inside the EEA, so no transfer mechanism is needed to reach it. Where it sends personal data on to is a separate question, and one for its own sub-processor list.

Where is Base sp. z o. o.'s trust center?

Base sp. z o. o. publishes it at https://www.zendesk.com/trust-center/. A trust center, trust page or security page is the same thing under different names: the vendor's own account of how it protects data, and the place it keeps its certifications. It is Base sp. z o. o.'s page, so we link to it rather than repeat what it says.

Where to go next

Worked out from the registry and what we have written: the country this vendor contracts from, the guides that answer the question this page raises, and the rest of the registry.

• Vendors contracting from Poland7 in the registry
• UK GDPR vs. GDPR: vendor registry differences that matter to your client baseUK GDPR and GDPR share a document checklist but diverge on transfer mechanisms, supervisory authorities, and vendor DPA
• The vendor registryLegal entities, transfer mechanisms and DPA links, checked by a person
• Download the registry as a CSVFree, for a spreadsheet
• Guides for privacy practicesHow the work is actually done