The purpose of this DPA is to secure adequate safeguards with the respect to the protection of privacy and to ensure that the processing of Personal Data is in accordance with the Data Controller’s and Data Processor’s legal obligations.
You don't have to sign this document, because it is appended to the Data Privacy Addendum which you should have provided your consent to upon continuing to use the plug&paid service when signing-up. This fulfills the requirement of Article 28(3) of the GDPR.
If you’d like to read more about the position of the controller and processor, please contact your national privacy authority for additional information.
You can also read our two part blog article written by our Co-Founder, George: The new Data Protection Law - GDPR, and how it impacts eCommerce businesses