DPA

Last updated: June 20, 2026.

Pending legal localization

This is the English base version of Nömad’s Data Processing Agreement. It should be legally localized before being treated as final for non-Spanish audiences.

Roles

Where Nömad processes personal data for its own purposes, it acts as controller. Where Nömad processes personal data on documented customer instructions to provide the service, it acts as processor.

Processing

Nömad processes personal data to provide, maintain, secure and support the platform and contracted services, including projects, content, deliverables, communication, infrastructure, integrations and legal obligations.

Security and subprocessors

Nömad applies reasonable technical and organizational measures and may use subprocessors required to operate hosting, database, storage, email, payments, analytics, AI, automation, support and infrastructure.

International transfers and deletion

Where international transfers occur, Nömad seeks appropriate safeguards. Upon termination, data will be deleted or returned where applicable, unless retention is legally or contractually required.