DPA under Art. 28 GDPR for pre-contractual review: subject matter, instructions, sub-processors, deletion concept and data subject rights.