What it says
What this says
Current to 11 Oct 26Executed data processing agreement between BB-Demo (Processor) and Vantrell Software (Customer), dated 21 Jun 2024. It covers personal data handling under UK GDPR. It states no price, availability or response-time figures.
What it is: a standard DPA under which BB-Demo processes personal data for Vantrell Software. The text says it takes effect "on the date of the main service agreement" and runs for its duration, and it is dated 21 Jun 2024.
Commits: BB-Demo must process data "only on documented written instructions from the Customer", notify sub-processor changes, and notify "without undue delay" of any confirmed data breach. It must delete or return personal data on termination unless law requires retention.
Unusual: nothing off the standard terms. Audit is limited to "not exceeding once per year" on reasonable notice. No service levels, price or renewal terms appear.
Not settled: the signature lines are blank in the text, so the copy read does not show who signed, though the stored status is executed and the date is stated. The main service agreement date and term are not given here.
As found in this document
Current to 9 Oct 26- Date signed21 Jun 2024Source: object_read:doc_015_005
- Processing instructionsBB-Demo shall process personal data only on documented written instructions from the Customer.BB-Demo shall process personal data only on documented written instructions from the Customer. · Source: object_read:doc_015_005
- Sub-processorsBB-Demo shall notify the Customer of any sub-processor changesBB-Demo shall notify the Customer of any sub-processor changes · Source: object_read:doc_015_005
- Data breachBB-Demo shall notify the Customer without undue delay of any confirmed data breachBB-Demo shall notify the Customer without undue delay of any confirmed data breach · Source: object_read:doc_015_005
- Auditupon reasonable notice and frequency not exceeding once per yearupon reasonable notice and frequency not exceeding once per year · Source: object_read:doc_015_005
- TerminationBB-Demo shall delete or return all personal data unless law requires retention.BB-Demo shall delete or return all personal data unless law requires retention. · Source: object_read:doc_015_005
The document
Body
Vantrell Software, Data Processing Agreement
Date Signed: 21 Jun 2024
Data Processing Agreement
This Data Processing Agreement ("DPA") is entered into between:
BB-Demo (hereinafter "Processor")
and
Vantrell Software (hereinafter "Customer")
1. Scope and Definitions
This Agreement sets out the terms on which BB-Demo processes personal data on behalf of Vantrell Software in the provision of the Company Brain platform and related services.
2. Processing Instructions
BB-Demo shall process personal data only on documented written instructions from the Customer. Processing shall be limited to the scope necessary to deliver the services ordered.
3. Processor Obligations
BB-Demo shall:
(a) Process personal data only in accordance with the Data Protection Act 2018 and UK General Data Protection Regulation.
(b) Ensure that persons authorised to process personal data are bound by confidentiality.
(c) Implement appropriate technical and organisational measures to ensure security.
(d) Assist the Customer in meeting its data subject rights obligations.
Read the whole document (2,400 characters)
(e) Delete or return all personal data at the end of service provision unless law requires storage.
4. Sub-processors
BB-Demo shall notify the Customer of any sub-processor changes and shall ensure sub-processors are bound by equivalent data protection obligations.
5. Data Subject Rights
BB-Demo shall assist the Customer in responding to data subject access requests and other rights requests within statutory timeframes.
6. Audit Rights
The Customer may audit BB-Demo's compliance with this DPA upon reasonable notice and frequency not exceeding once per year.
7. Data Breach
BB-Demo shall notify the Customer without undue delay of any confirmed data breach affecting personal data processed under this DPA.
8. Term and Termination
This DPA shall take effect on the date of the main service agreement and shall continue for its duration. Upon termination, BB-Demo shall delete or return all personal data unless law requires retention.
9. Governing Law
This DPA is governed by English law and the courts of England and Wales.
Signature Block
For BB-Demo:
_________________________ Authorised Signatory BB-Demo
For Vantrell Software:
_________________________ Authorised Representative Vantrell Software
Date: 21 Jun 2024