Brakkevoort Logistics - Data Processing Agreement (signed)
Documentexecuted Brakkevoort Logistics: documents · dpa · executed · 2025-03-21
Executed Data Processing Agreement under the MSA signed the same day, with Brakkevoort Logistics as controller and BB-Demo as processor. Data stays in the customer's own Snowflake account. It states no price, availability figure or response times.
What it says
What this says
Current to 11 Oct 26Executed Data Processing Agreement under the MSA signed the same day, with Brakkevoort Logistics as controller and BB-Demo as processor. Data stays in the customer's own Snowflake account. It states no price, availability figure or response times.
What it is: an executed DPA, version 1, signed 21 Mar 2025 and stated to form part of the Master Services Agreement signed the same day. Brakkevoort Logistics, based in Rotterdam, is the controller and BB-Demo, based in London, is the processor.
Commits: BB-Demo processes personal data "only on the Customer's documented instructions", binds authorised staff to confidentiality, applies access controls, encryption and logging, and tells the customer of a breach "without undue delay". It also allows audits on reasonable notice.
Unusual: sub-processors are under general authorisation, with notice before changes and a right to object on reasonable grounds. On exit the data stays in the customer's Snowflake account and BB-Demo deletes any copies it holds elsewhere.
Not settled: no breach notification deadline in hours, no price, no service levels. The customer signatory is shown only as "Authorised signatory", with no name. Liability follows the MSA, which is not in this document.
As found in this document
Current to 9 Oct 26- Date signed21 Mar 2025Source: object_read:doc_024_006
- Processing instructionsprocess personal data only on the Customer's documented instructions, unless the law requires otherwiseprocess personal data only on the Customer's documented instructions, unless the law requires otherwise · Source: object_read:doc_024_006
- Breach notificationBB-Demo will tell the Customer without undue delay after becoming aware of a personal data breach affecting the Customer's dataBB-Demo will tell the Customer without undue delay after becoming aware of a personal data breach affecting the Customer's data · Source: object_read:doc_024_006
- Sub-processorsBB-Demo will keep a current list available to the Customer, tell the Customer before adding or replacing one, and give the Customer the chance to object on reasonable data protection groundsBB-Demo will keep a current list available to the Customer, tell the Customer before adding or replacing one, and give the Customer the chance to object on reasonable data protection grounds · Source: object_read:doc_024_006
- Auditallow and contribute to audits by the Customer or an auditor the Customer appoints, on reasonable notice, during business hours and subject to confidentialityallow and contribute to audits by the Customer or an auditor the Customer appoints, on reasonable notice, during business hours and subject to confidentiality · Source: object_read:doc_024_006
- Return and deletionBB-Demo will remove its own access and delete any copies of personal data it holds elsewhere, unless the law requires it to keep themBB-Demo will remove its own access and delete any copies of personal data it holds elsewhere, unless the law requires it to keep them · Source: object_read:doc_024_006
The document
Body
Brakkevoort Logistics - Data Processing Agreement (signed)
Status: Executed. Version 1.
Signed: 21 March 2025
This Data Processing Agreement forms part of the Master Services Agreement between BB-Demo and Brakkevoort Logistics signed on the same day.
Parties and roles
- Brakkevoort Logistics, based in Rotterdam, is the controller of the personal data processed under this agreement ("the Customer").
- BB-Demo, based in London, is the processor ("BB-Demo").
Subject matter and purpose
BB-Demo provides the company brain to the Customer: an AI-queryable layer over the Customer's connected systems, built and run inside the Customer's own Snowflake account. BB-Demo processes personal data only to set up, run and support that service, and only on the Customer's documented instructions.
Nature of the processing
The processing consists of indexing, storing in the Customer's Snowflake account, searching and summarising records that the Customer chooses to connect. The Customer decides which systems are connected and can disconnect any of them at any time.
Categories of data and data subjects
Read the whole document (4,551 characters)
| Item | Description |
|---|---|
| Data subjects | Employees and contractors of the Customer; contacts at shipper accounts and other business partners of the Customer |
| Personal data | Names, business email addresses, job titles, call recordings and transcripts, ticket and email content, account and activity records |
| Special categories | None are intended. The Customer will not connect sources that hold them without agreeing safeguards in writing first |
Obligations of BB-Demo
BB-Demo will:
- process personal data only on the Customer's documented instructions, unless the law requires otherwise, in which case it will tell the Customer first where it is allowed to;
- make sure that everyone authorised to process the data is bound by confidentiality;
- apply appropriate technical and organisational security measures, including access controls, encryption and logging of administrative access;
- help the Customer respond to requests from data subjects, taking into account the nature of the processing;
- help the Customer with its security, breach notification and impact assessment duties, so far as they relate to BB-Demo's processing.
Location of data
The Customer's data stays in the Customer's own Snowflake account. BB-Demo staff access it only as needed to deliver and support the service. Any transfer of personal data outside the area covered by the applicable data protection laws will take place only with the safeguards those laws require.
Sub-processors
The Customer gives general authorisation for BB-Demo to use sub-processors that support the service. BB-Demo will keep a current list available to the Customer, tell the Customer before adding or replacing one, and give the Customer the chance to object on reasonable data protection grounds. BB-Demo stays responsible for its sub-processors and flows down obligations no less protective than these.
Personal data breaches
BB-Demo will tell the Customer without undue delay after becoming aware of a personal data breach affecting the Customer's data. The notice will describe, as far as known, what happened, the data and people affected, the likely consequences and the steps taken or proposed. BB-Demo will keep the Customer updated as more becomes known.
Audit
BB-Demo will make available the information reasonably needed to show compliance with this agreement and will allow and contribute to audits by the Customer or an auditor the Customer appoints, on reasonable notice, during business hours and subject to confidentiality.
Return and deletion
When the services end, the Customer's data remains in the Customer's own Snowflake account under its control. BB-Demo will remove its own access and delete any copies of personal data it holds elsewhere, unless the law requires it to keep them.
Liability and precedence
Liability under this agreement is governed by the limits in the Master Services Agreement. If this agreement conflicts with the Master Services Agreement on the handling of personal data, this agreement prevails.
Governing law
This agreement follows the governing law of the Master Services Agreement, without affecting any mandatory data protection law that applies to the Customer.
Signatures
For BB-Demo
Name: Tom Ashdown
Title: Account Executive
Date: 21 March 2025
For Brakkevoort Logistics
Title: Authorised signatory
Date: 21 March 2025
Unusual terms
Current to 9 Oct 26- General authorisation for sub-processors
- Breach notice without a fixed deadline
- DPA prevails over MSA on personal data