Corriemoor Foods - Data Processing Agreement (signed)
Documentexecuted Corriemoor Foods: documents · dpa · executed · 2023-07-14
Executed data processing agreement between BB-Demo Limited (Processor) and Corriemoor Foods (Controller), signed 14 Jul 2023. It sets security, subprocessor, deletion and audit terms. It states no price, availability or response time.
What it says
What this says
Current to 11 Oct 26Executed data processing agreement between BB-Demo Limited (Processor) and Corriemoor Foods (Controller), signed 14 Jul 2023. It sets security, subprocessor, deletion and audit terms. It states no price, availability or response time.
What it is: a data processing agreement under which BB-Demo Limited processes personal data for Corriemoor Foods. Both parties are dated 14 Jul 2023 in the signature table.
Commits: the Processor acts only on documented instructions and keeps "Encryption of Data in transit (TLS 1.2 or higher) and at rest (AES-256)". It must delete all Data within thirty days of termination.
Unusual: subprocessors need the Controller's prior written consent, which is stricter than a notice-only model. Audit is on ten business days' notice, once per calendar year unless a prior audit revealed a material breach.
Not settled: the Corriemoor Foods signatory name and title are blank. The text sets no term, price, service level or renewal date, and refers to a related order form that is not part of this document.
As found in this document
Current to 9 Oct 26- Date signed14 Jul 2023Source: object_read:doc_012_005
- Processing instructionsThe Processor shall process Data only on documented instructions of the Controller, unless required to do so by law.The Processor shall process Data only on documented instructions of the Controller, unless required to do so by law. · Source: object_read:doc_012_005
- EncryptionEncryption of Data in transit (TLS 1.2 or higher) and at rest (AES-256)Encryption of Data in transit (TLS 1.2 or higher) and at rest (AES-256) · Source: object_read:doc_012_005
- Subprocessorsonly with the Controller's prior written consentonly with the Controller's prior written consent · Source: object_read:doc_012_005
- Data deletiondelete all Data within thirty days unless required by law to retain itdelete all Data within thirty days unless required by law to retain it · Source: object_read:doc_012_005
- Auditon ten business days' notice, not more than once per calendar year unless a prior audit revealed a material breachon ten business days' notice, not more than once per calendar year unless a prior audit revealed a material breach · Source: object_read:doc_012_005
The document
Body
Corriemoor Foods - Data Processing Agreement (signed)
Parties:
- BB-Demo Limited ("Processor")
- Corriemoor Foods ("Controller")
1. Definitions
"Data" means personal data as defined in the Data Protection Act 2018. "Services" means the provision of the company brain as set out in the related order form. "Processor" means BB-Demo Limited. "Controller" means Corriemoor Foods.
2. Processing Instructions
The Processor shall process Data only on documented instructions of the Controller, unless required to do so by law.
3. Security
The Processor shall maintain appropriate technical and organisational measures to protect Data, including:
- Encryption of Data in transit (TLS 1.2 or higher) and at rest (AES-256)
- Role-based access controls
- Regular security assessments
4. Subprocessors
The Processor may engage a subprocessor only with the Controller's prior written consent. A current list of subprocessors is available on request.
5. Data Subject Rights
The Processor shall assist the Controller in fulfilling its obligations to data subjects seeking to exercise their rights under data protection law.
6. Data Deletion
Read the whole document (1,689 characters)
Upon termination of the Services, the Processor shall delete all Data within thirty days unless required by law to retain it.
7. Audit
The Controller may audit the Processor's compliance with this Agreement on ten business days' notice, not more than once per calendar year unless a prior audit revealed a material breach.
Signatures
| For and on behalf of | Signatory Title | Date |
|---|---|---|
| BB-Demo Limited | Chief Executive Officer and Co-founder | 14 Jul 2023 |
| Corriemoor Foods | 14 Jul 2023 |
Unusual terms
Current to 9 Oct 26- Subprocessors need prior written consent
- Audit on ten business days' notice
- Deletion within thirty days of termination