Hello Railway Team,

We are Brainwash UG (haftungsbeschränkt), based in Deggendorf, Germany.

We use Railway to host our BRNWSH digital loyalty card application, which processes personal data of our customers.

To meet our obligations under Article 28 GDPR, we would like to obtain and conclude a Data Processing Agreement (DPA) with Railway.

Could you please confirm:

1.	Where can we access and sign your DPA?
2.	Which subprocessors are involved?
3.	In which countries is our application data stored and processed?
4.	What safeguards apply to any international data transfers?

Thank you for your assistance.

Best regards,
Brainwash UG (haftungsbeschränkt)