Hollins Tarrant - Data Processing Agreement (signed)
Documentexecuted Hollins Tarrant: documents · dpa · executed · 2023-12-13
Executed data processing agreement under the master services agreement between BB-Demo and Hollins Tarrant, signed 13 Dec 2023. BB-Demo acts only on documented instructions and keeps data in the customer's own Snowflake account. It states no price or service levels.
What it says
What this says
Current to 11 Oct 26Executed data processing agreement under the master services agreement between BB-Demo and Hollins Tarrant, signed 13 Dec 2023. BB-Demo acts only on documented instructions and keeps data in the customer's own Snowflake account. It states no price or service levels.
What it is: an executed DPA marked "Status: Executed", signed 13 Dec 2023 by Tom Ashdown, Account Executive for BB-Demo, and an authorised signatory for Hollins Tarrant. The customer signatory's name is blank in the signature table.
Commits: BB-Demo will act "only on the customer's documented instructions" and will not use another organisation to handle personal data "without the customer's prior written consent". It must tell the customer "without undue delay" of a breach and allow "reasonable audits" on reasonable notice.
Unusual: data stays in the customer's own Snowflake account and BB-Demo "will not copy it out of that account" without written instruction. On exit BB-Demo removes its own access and working copies and confirms in writing if asked.
Not settled: no fixed breach notification period, no price, no term or renewal date, and no service levels. Those sit in the master services agreement and order form, which are not part of this document.
As found in this document
Current to 9 Oct 26- Date signed13 Dec 2023Source: object_read:doc_004_005
- InstructionsBB-Demo will act only on the customer's documented instructionsBB-Demo will act only on the customer's documented instructions · Source: object_read:doc_004_005
- Location of the dataThe customer's data stays in the customer's own Snowflake account.The customer's data stays in the customer's own Snowflake account. · Source: object_read:doc_004_005
- Sub-processorsBB-Demo will not use another organisation to handle the customer's personal data without the customer's prior written consent.BB-Demo will not use another organisation to handle the customer's personal data without the customer's prior written consent. · Source: object_read:doc_004_005
- Personal data breachesBB-Demo will tell the customer without undue delay if it becomes aware of a breach affecting the customer's dataBB-Demo will tell the customer without undue delay if it becomes aware of a breach affecting the customer's data · Source: object_read:doc_004_005
- Auditreasonable audits by the customer, on reasonable notice and during business hoursreasonable audits by the customer, on reasonable notice and during business hours · Source: object_read:doc_004_005
- Return and deletionBB-Demo will remove its own access and any working copies it holds, and will confirm this in writing if asked.BB-Demo will remove its own access and any working copies it holds, and will confirm this in writing if asked. · Source: object_read:doc_004_005
The document
Body
Hollins Tarrant - Data Processing Agreement (signed)
Status: Executed Signed: 13 Dec 2023
This agreement sits under the master services agreement between BB-Demo and Hollins Tarrant and governs how BB-Demo handles personal data on behalf of Hollins Tarrant.
Parties
- Hollins Tarrant, a recruitment firm based in Bristol (the customer). The customer decides why and how personal data is used.
- BB-Demo, a London data business (the supplier). BB-Demo handles that data only on the customer's behalf.
Subject matter and purpose
BB-Demo builds and runs the company brain inside the customer's own Snowflake account. In doing so it may handle personal data held in the customer's connected systems, such as client contacts in the CRM, candidate and placement records, and client-facing support tickets. BB-Demo will handle that data only to provide the services described in the master services agreement.
Instructions
Read the whole document (3,132 characters)
BB-Demo will act only on the customer's documented instructions, which include the master services agreement, the order form and the configuration of the connected sources. If BB-Demo believes an instruction breaches data protection law, it will tell the customer promptly.
Location of the data
The customer's data stays in the customer's own Snowflake account. BB-Demo will not copy it out of that account or move it elsewhere, except where the customer instructs it to in writing.
Confidentiality
Everyone at BB-Demo who can reach the customer's data is bound by a duty of confidence, and access is limited to those who need it to deliver the services.
Security
BB-Demo will keep appropriate technical and organisational measures in place to protect the customer's data, including access controls, separation of customer environments and logging of access to the brain.
Sub-processors
BB-Demo will not use another organisation to handle the customer's personal data without the customer's prior written consent. Where it does, it will bind that organisation to terms no less protective than these.
Requests from individuals
If a person asks to exercise rights over their data, BB-Demo will help the customer to respond within the time the law allows, and will pass on to the customer any request it receives directly.
Personal data breaches
BB-Demo will tell the customer without undue delay if it becomes aware of a breach affecting the customer's data, and will give the customer the information it needs to meet its own obligations.
Audit
BB-Demo will make available the information needed to show compliance with this agreement and will allow reasonable audits by the customer, on reasonable notice and during business hours.
Return and deletion
When the services end, the customer's data remains in the customer's own Snowflake account. BB-Demo will remove its own access and any working copies it holds, and will confirm this in writing if asked.
Signatures
| Hollins Tarrant | BB-Demo | |
|---|---|---|
| Name | Tom Ashdown | |
| Title | Authorised signatory | Account Executive |
| Date signed | 13 Dec 2023 | 13 Dec 2023 |
Unusual terms
Current to 9 Oct 26- Data kept in customer's own Snowflake account
- Prior written consent for sub-processors
- No fixed breach notification period