What it says
What this says
Current to 11 Oct 26Executed data processing agreement under which BB-Demo acts as processor for Brindlecote Insurance Brokers under the Data Protection Act 2018 and UK GDPR. It states no price, service levels or term. BB-Demo indemnifies Brindlecote for breach of its processing obligations.
What it is: a short data processing agreement, version 1, signed on 19 May 2023 by Nell Ashcombe for BB-Demo and an unnamed authorised representative for Brindlecote.
Commits: BB-Demo shall "assist Brindlecote in responding to data subject rights requests within the timescales required by law" and must notify Brindlecote of any new sub-processor. Brindlecote must give data subjects notice of BB-Demo's role as processor.
Unusual: clause 6 has BB-Demo "indemnify Brindlecote against claims arising from BB-Demo's breach of its data processing obligations". The text sets no cap on that indemnity. Security wording is general: "industry-standard" measures.
Not settled: the document states no price, term, renewal date, availability or response times, and does not name the Brindlecote signatory or their role. Commercial terms sit in the order form, which this document does not cover.
As found in this document
Current to 9 Oct 26- Date signed19 May 2023Source: object_read:doc_011_005
- Data subject rightsBB-Demo shall assist Brindlecote in responding to data subject rights requests within the timescales required by law.BB-Demo shall assist Brindlecote in responding to data subject rights requests within the timescales required by law. · Source: object_read:doc_011_005
- SecurityBB-Demo implements industry-standard technical and organisational measures to protect personal data, including encryption in transit and at rest, access controls and audit logging.BB-Demo implements industry-standard technical and organisational measures to protect personal data, including encryption in transit and at rest, access controls and audit logging. · Source: object_read:doc_011_005
- Sub-processorsBrindlecote shall be notified of any new sub-processor or changes to existing arrangements.Brindlecote shall be notified of any new sub-processor or changes to existing arrangements. · Source: object_read:doc_011_005
- LiabilityBB-Demo shall indemnify Brindlecote against claims arising from BB-Demo's breach of its data processing obligations.BB-Demo shall indemnify Brindlecote against claims arising from BB-Demo's breach of its data processing obligations. · Source: object_read:doc_011_005
The document
Body
Brindlecote Insurance Brokers, Data Processing Agreement
1. Scope
BB-Demo processes personal data on behalf of Brindlecote Insurance Brokers in accordance with the Data Protection Act 2018 and the UK General Data Protection Regulation (GDPR).
2. Processing Activities
BB-Demo acts as a data processor for data held in the customer's connected systems (CRM, call recordings, emails, finance and HR systems) that may contain personal data.
3. Data Subject Rights
Brindlecote shall provide data subjects with notice of BB-Demo's role as processor. BB-Demo shall assist Brindlecote in responding to data subject rights requests within the timescales required by law.
4. Security
BB-Demo implements industry-standard technical and organisational measures to protect personal data, including encryption in transit and at rest, access controls and audit logging.
5. Sub-processors
BB-Demo may engage sub-processors including cloud platform providers. Brindlecote shall be notified of any new sub-processor or changes to existing arrangements.
6. Liabilities
Read the whole document (1,472 characters)
BB-Demo shall comply with its obligations under this agreement and shall indemnify Brindlecote against claims arising from BB-Demo's breach of its data processing obligations.
Execution
For and on behalf of BB-Demo
Nell Ashcombe Chief Executive Officer and Co-founder 19 May 2023
For and on behalf of Brindlecote Insurance Brokers
Authorised representative 19 May 2023
Unusual terms
Current to 9 Oct 26- Uncapped indemnity for processing breach
- Sub-processor change notification