Hollins Tarrant - Data Processing Agreement (signed)
Documentexecuted Hollins Tarrant: documents · dpa · executed · 2023-12-13
Executed data processing agreement under the master services agreement between B-Brain and Hollins Tarrant, signed 13 Dec 2023. B-Brain acts only on documented instructions and keeps data in the customer's own Snowflake account. It states no price or service levels.
What it says
What this says
Current to 11 Oct 26Executed data processing agreement under the master services agreement between B-Brain and Hollins Tarrant, signed 13 Dec 2023. B-Brain acts only on documented instructions and keeps data in the customer's own Snowflake account. It states no price or service levels.
What it is: an executed DPA marked "Status: Executed", signed 13 Dec 2023 by Tom Ashdown, Account Executive for B-Brain, and an authorised signatory for Hollins Tarrant. The customer signatory's name is blank in the signature table.
Commits: B-Brain will act "only on the customer's documented instructions" and will not use another organisation to handle personal data "without the customer's prior written consent". It must tell the customer "without undue delay" of a breach and allow "reasonable audits" on reasonable notice.
Unusual: data stays in the customer's own Snowflake account and B-Brain "will not copy it out of that account" without written instruction. On exit B-Brain removes its own access and working copies and confirms in writing if asked.
Not settled: no fixed breach notification period, no price, no term or renewal date, and no service levels. Those sit in the master services agreement and order form, which are not part of this document.
As found in this document
Current to 9 Oct 26- Date signed13 Dec 2023Source: object_read:doc_004_005
- InstructionsB-Brain will act only on the customer's documented instructionsB-Brain will act only on the customer's documented instructions · Source: object_read:doc_004_005
- Location of the dataThe customer's data stays in the customer's own Snowflake account.The customer's data stays in the customer's own Snowflake account. · Source: object_read:doc_004_005
- Sub-processorsB-Brain will not use another organisation to handle the customer's personal data without the customer's prior written consent.B-Brain will not use another organisation to handle the customer's personal data without the customer's prior written consent. · Source: object_read:doc_004_005
- Personal data breachesB-Brain will tell the customer without undue delay if it becomes aware of a breach affecting the customer's dataB-Brain will tell the customer without undue delay if it becomes aware of a breach affecting the customer's data · Source: object_read:doc_004_005
- Auditreasonable audits by the customer, on reasonable notice and during business hoursreasonable audits by the customer, on reasonable notice and during business hours · Source: object_read:doc_004_005
- Return and deletionB-Brain will remove its own access and any working copies it holds, and will confirm this in writing if asked.B-Brain will remove its own access and any working copies it holds, and will confirm this in writing if asked. · Source: object_read:doc_004_005
The document
Body
Hollins Tarrant - Data Processing Agreement (signed)
Status: Executed Signed: 13 Dec 2023
This agreement sits under the master services agreement between B-Brain and Hollins Tarrant and governs how B-Brain handles personal data on behalf of Hollins Tarrant.
Parties
- Hollins Tarrant, a recruitment firm based in Bristol (the customer). The customer decides why and how personal data is used.
- B-Brain, a London data business (the supplier). B-Brain handles that data only on the customer's behalf.
Subject matter and purpose
B-Brain builds and runs the company brain inside the customer's own Snowflake account. In doing so it may handle personal data held in the customer's connected systems, such as client contacts in the CRM, candidate and placement records, and client-facing support tickets. B-Brain will handle that data only to provide the services described in the master services agreement.
Instructions
Read the whole document (3,132 characters)
B-Brain will act only on the customer's documented instructions, which include the master services agreement, the order form and the configuration of the connected sources. If B-Brain believes an instruction breaches data protection law, it will tell the customer promptly.
Location of the data
The customer's data stays in the customer's own Snowflake account. B-Brain will not copy it out of that account or move it elsewhere, except where the customer instructs it to in writing.
Confidentiality
Everyone at B-Brain who can reach the customer's data is bound by a duty of confidence, and access is limited to those who need it to deliver the services.
Security
B-Brain will keep appropriate technical and organisational measures in place to protect the customer's data, including access controls, separation of customer environments and logging of access to the brain.
Sub-processors
B-Brain will not use another organisation to handle the customer's personal data without the customer's prior written consent. Where it does, it will bind that organisation to terms no less protective than these.
Requests from individuals
If a person asks to exercise rights over their data, B-Brain will help the customer to respond within the time the law allows, and will pass on to the customer any request it receives directly.
Personal data breaches
B-Brain will tell the customer without undue delay if it becomes aware of a breach affecting the customer's data, and will give the customer the information it needs to meet its own obligations.
Audit
B-Brain will make available the information needed to show compliance with this agreement and will allow reasonable audits by the customer, on reasonable notice and during business hours.
Return and deletion
When the services end, the customer's data remains in the customer's own Snowflake account. B-Brain will remove its own access and any working copies it holds, and will confirm this in writing if asked.
Signatures
| Hollins Tarrant | B-Brain | |
|---|---|---|
| Name | Tom Ashdown | |
| Title | Authorised signatory | Account Executive |
| Date signed | 13 Dec 2023 | 13 Dec 2023 |
Unusual terms
Current to 9 Oct 26- Data kept in customer's own Snowflake account
- Prior written consent for sub-processors
- No fixed breach notification period