All companies processing personal data must comply with the GDPR, regardless whether payment is charged or not.

What is a Data Processing Agreement (DPA) Playbook
Data Protection Agreement What is a Data Processing Agreement (DPA)? A DPA is a contract between a controller and a processor that explains what personal