Lindqvarn Retail - Data Processing Agreement (signed)
Documentexecuted Lindqvarn Retail: documents · dpa · executed · 2025-05-23
Executed data processing agreement between Lindqvarn Retail and BB-Demo, signed on 23 May 2025. It sets how BB-Demo handles personal data inside the customer's own Snowflake account. It states no price, availability or response-time figures.
What it says
What this says
Current to 11 Oct 26Executed data processing agreement between Lindqvarn Retail and BB-Demo, signed on 23 May 2025. It sets how BB-Demo handles personal data inside the customer's own Snowflake account. It states no price, availability or response-time figures.
What it is: an executed DPA under the master agreement and order form. It states "Status: Executed. Signed on 23 May 2025." and is signed by Tom Ashdown for BB-Demo and an unnamed authorised signatory for Lindqvarn Retail.
Commits: BB-Demo acts only on documented instructions, and "The supplier will not appoint a sub-processor to handle the customer's personal data without the customer's prior written authorisation." It must report breaches "without undue delay" and allow audits on reasonable notice.
Unusual: nothing off standard commercial terms. Data stays in the customer's Snowflake account, and regional residency applies only where written into an order form.
Not settled: no price, service levels, connector dates, term or renewal date. The customer signatory is not named, so the evidence does not show who signed for Lindqvarn Retail.
As found in this document
Current to 9 Oct 26- Date signed23 May 2025Source: object_read:doc_026_006
- InstructionsThe supplier acts only on the customer's documented instructions.The supplier acts only on the customer's documented instructions. · Source: object_read:doc_026_006
- Data locationThe brain runs inside the customer's own Snowflake account. Customer data stays in that account.The brain runs inside the customer's own Snowflake account. Customer data stays in that account. · Source: object_read:doc_026_006
- Sub-processorsThe supplier will not appoint a sub-processor to handle the customer's personal data without the customer's prior written authorisation.The supplier will not appoint a sub-processor to handle the customer's personal data without the customer's prior written authorisation. · Source: object_read:doc_026_006
- Breach notificationThe supplier will tell the customer without undue delay after becoming aware of a personal data breach affecting the customer's data.The supplier will tell the customer without undue delay after becoming aware of a personal data breach affecting the customer's data. · Source: object_read:doc_026_006
- Return and deletionWhen the agreement ends, the supplier will, at the customer's choice, return or delete personal data that it holds on the customer's behalf.When the agreement ends, the supplier will, at the customer's choice, return or delete personal data that it holds on the customer's behalf. · Source: object_read:doc_026_006
- AuditThe supplier will allow and contribute to audits by the customer or an auditor the customer appoints, on reasonable notice and during normal business hours.The supplier will allow and contribute to audits by the customer or an auditor the customer appoints, on reasonable notice and during normal business hours. · Source: object_read:doc_026_006
The document
Body
Lindqvarn Retail - Data Processing Agreement (signed)
Status: Executed. Signed on 23 May 2025.
Parties
This agreement is made between Lindqvarn Retail, a homeware and furniture retailer headquartered in Stockholm (the customer), and BB-Demo, a London data business (the supplier).
Background
The customer is buying the BB-Demo company brain to join customer service, e-commerce and store feedback into one view of each customer segment. In doing so, the supplier will handle personal data on the customer's behalf. This agreement sets out how that data is handled.
1. Roles of the parties
1.1 The customer decides why and how personal data is used. The supplier acts only on the customer's documented instructions.
1.2 The supplier will tell the customer promptly if it believes an instruction would breach data protection law.
1.3 The customer is responsible for having a lawful basis for the data it connects to the brain.
2. Subject matter and duration
Read the whole document (4,040 characters)
2.1 The supplier builds and runs the company brain for the customer. The brain brings together customer service records, e-commerce data and store feedback, and any other sources the customer chooses to connect under its order form.
2.2 This agreement lasts for as long as the supplier handles personal data for the customer under the master agreement.
3. Location of data
3.1 The brain runs inside the customer's own Snowflake account. Customer data stays in that account.
3.2 The supplier does not copy customer data out of the customer's Snowflake account except where the customer instructs it in writing.
3.3 Any dedicated regional data residency is an add-on and applies only where it is written into an order form.
4. Supplier obligations
The supplier will:
- process personal data only for the purpose of providing the brain and its support;
- keep personal data confidential and make sure staff with access are bound by confidentiality;
- apply appropriate technical and organisational measures to protect personal data;
- give the customer reasonable help with requests from individuals exercising their rights;
- give the customer reasonable help with impact assessments and with dealings with regulators.
5. Sub-processors
5.1 The supplier will not appoint a sub-processor to handle the customer's personal data without the customer's prior written authorisation.
5.2 Where a sub-processor is authorised, the supplier will bind it to obligations no less protective than those in this agreement and remains responsible for its performance.
6. Personal data breaches
6.1 The supplier will tell the customer without undue delay after becoming aware of a personal data breach affecting the customer's data.
6.2 The notice will describe what happened, the data affected, and the steps taken or proposed to contain it.
7. Return and deletion
7.1 When the agreement ends, the supplier will, at the customer's choice, return or delete personal data that it holds on the customer's behalf.
7.2 Because the brain sits inside the customer's Snowflake account, the customer keeps control of the underlying data throughout.
8. Audit
8.1 The supplier will make available the information needed to show it has met this agreement.
8.2 The supplier will allow and contribute to audits by the customer or an auditor the customer appoints, on reasonable notice and during normal business hours.
9. Governing terms
9.1 This agreement sits under the master agreement between the parties and the order form once signed.
9.2 If this agreement conflicts with the master agreement on the handling of personal data, this agreement prevails.
Contacts
| Role | Name | Organisation |
|---|---|---|
| Account Executive | Tom Ashdown | BB-Demo |
| Customer Success Manager | Esther Quaye | BB-Demo |
Signatures
| For Lindqvarn Retail | For BB-Demo | |
|---|---|---|
| Signed by | Authorised signatory | Tom Ashdown |
| Title | Authorised signatory for the customer | Account Executive |
| Date | 23 May 2025 | 23 May 2025 |
Unusual terms
Current to 9 Oct 26- DPA prevails over master agreement on personal data
- Regional data residency only if written into an order form