Brannock Medical Supplies - Data Processing Agreement (signed)
Documentexecuted Brannock Medical Supplies: documents · dpa · executed · 2024-04-12
Executed data processing agreement dated 12 Apr 2024 between Brannock Medical Supplies and BB-Demo. BB-Demo processes personal data only on Brannock's instructions inside Brannock's own Snowflake account. It states no price, availability figure or response times.
What it says
What this says
Current to 11 Oct 26Executed data processing agreement dated 12 Apr 2024 between Brannock Medical Supplies and BB-Demo. BB-Demo processes personal data only on Brannock's instructions inside Brannock's own Snowflake account. It states no price, availability figure or response times.
What it is: an executed DPA that sits alongside the master agreement and order form. It covers personal data of NHS trust, GP practice and care home contacts and Brannock staff who use the brain.
Commits: BB-Demo acts only on documented instructions and tells Brannock "without undue delay" of a personal data breach. It will not move personal data "outside the United Kingdom" without written agreement.
Unusual: nothing off the standard terms. The agreement has no end date and runs for as long as BB-Demo handles personal data under the master agreement.
Not settled: the document gives no price, service levels or renewal date, and the customer signatory is unnamed ("Authorised signatory"). Those sit in the master agreement and order form, which are not in this file.
As found in this document
Current to 9 Oct 26- Date signed12 Apr 2024Source: object_read:doc_016_006
- Date start12 Apr 2024Source: object_read:doc_016_006
- InstructionsProcess personal data only on Brannock's instructions and only to provide the brain.Process personal data only on Brannock's instructions and only to provide the brain. · Source: object_read:doc_016_006
- Engaging another partyNot engage another party to process personal data without telling Brannock first and giving it the chance to object.Not engage another party to process personal data without telling Brannock first and giving it the chance to object. · Source: object_read:doc_016_006
- Data locationNot move personal data outside Brannock's Snowflake account, or outside the United Kingdom, without Brannock's written agreement.Not move personal data outside Brannock's Snowflake account, or outside the United Kingdom, without Brannock's written agreement. · Source: object_read:doc_016_006
- Breach notificationTell Brannock without undue delay on becoming aware of a personal data breach.Tell Brannock without undue delay on becoming aware of a personal data breach. · Source: object_read:doc_016_006
- End of servicesReturn or delete personal data as Brannock instructs, unless the law requires otherwise.Return or delete personal data as Brannock instructs, unless the law requires otherwise. · Source: object_read:doc_016_006
- AuditAllow reasonable audits on sensible notice, during business hours and without disrupting service for other customers.Allow reasonable audits on sensible notice, during business hours and without disrupting service for other customers. · Source: object_read:doc_016_006
The document
Body
Brannock Medical Supplies - Data Processing Agreement (signed)
Status: Executed
This agreement is made on 12 Apr 2024 between Brannock Medical Supplies, a distributor of clinical consumables based in Nottingham ("Brannock"), and BB-Demo, a London data business ("BB-Demo"). It sits alongside the master agreement and order form between the parties.
1. Purpose and scope
- Brannock uses the BB-Demo company brain to give its key-account managers a joined-up view of orders, delivery queries and contract renewals.
- In doing so, BB-Demo handles personal data on Brannock's behalf. This agreement sets out how.
- The brain is built and run inside Brannock's own Snowflake account. Personal data stays in that account.
2. Roles
Brannock decides why and how personal data is used. BB-Demo acts only on Brannock's documented instructions, which are the master agreement, the order form and this agreement.
3. Categories of data and people
Read the whole document (3,404 characters)
- People: contacts at NHS trusts, GP practices and care homes; Brannock staff who use the brain.
- Data: names, work contact details, job roles and records of orders, deliveries and contract correspondence held in the connected systems.
- No special category data is intended to be processed. Brannock will tell BB-Demo before connecting any source that holds it.
4. What BB-Demo will do
- Process personal data only on Brannock's instructions and only to provide the brain.
- Make sure that anyone at BB-Demo with access is bound by a duty of confidence.
- Apply sensible technical and organisational security measures, including access controls and logging within Brannock's Snowflake account.
- Not engage another party to process personal data without telling Brannock first and giving it the chance to object.
- Help Brannock respond to requests from individuals exercising their rights.
- Help Brannock with security obligations, breach notification and impact assessments.
- Tell Brannock without undue delay on becoming aware of a personal data breach.
- At the end of the services, return or delete personal data as Brannock instructs, unless the law requires otherwise.
5. What Brannock will do
- Make sure it has a lawful basis for the personal data it asks BB-Demo to handle.
- Give clear and lawful instructions.
- Keep control of which sources are connected and who has access to the brain.
6. Location of data
BB-Demo will not move personal data outside Brannock's Snowflake account, or outside the United Kingdom, without Brannock's written agreement. Dedicated data residency can be arranged as an add-on if required.
7. Audit
BB-Demo will give Brannock the information reasonably needed to show compliance with this agreement and will allow reasonable audits on sensible notice, during business hours and without disrupting service for other customers.
8. Term
This agreement starts on the date above and continues for as long as BB-Demo handles personal data for Brannock under the master agreement.
9. Governing law
This agreement is governed by the law of England and Wales, and the courts of England and Wales have jurisdiction.
Signatures
| For Brannock Medical Supplies | For BB-Demo | |
|---|---|---|
| Name | Authorised signatory | Priya Raman |
| Title | Authorised signatory of Brannock Medical Supplies | Account Executive |
| Date | 12 Apr 2024 | 12 Apr 2024 |