A Data Processing Agreement (DPA) is mandatory whenever you have personal data processed by a third party — think of a hosting provider, a mailing service or an accounting package. This template is built on GDPR Article 28 and contains all the required elements, written in plain English with clear fillable fields.
When do you need this?
Every time you share personal data with or have it processed by an external party, you as data controller are obliged to put a data processing agreement in place. Examples: