Skovdal Software - Data Processing Agreement (signed)
Documentexecuted Skovdal Software: documents · dpa · executed · 2025-01-17
Signed DPA dated 17 Jan 2025 between BB-Demo as Processor and Skovdal Software as Customer and data controller. It sets UK GDPR processing duties, sub-processor consent and breach notification. It states no price, availability or response times.
What it says
What this says
Current to 11 Oct 26Signed DPA dated 17 Jan 2025 between BB-Demo as Processor and Skovdal Software as Customer and data controller. It sets UK GDPR processing duties, sub-processor consent and breach notification. It states no price, availability or response times.
What it is: an executed data processing agreement under which BB-Demo processes personal data for Skovdal Software in delivering the Company Brain platform. Section 2 states "The Customer remains the data controller for purposes of data protection law."
Commits: BB-Demo must process data only on documented instructions, bind authorised staff to confidentiality, and delete or return personal data on termination. Section 7 requires notice of a confirmed breach "without undue delay and in accordance with statutory timeframes."
Unusual: section 4 says BB-Demo "shall not engage sub-processors without prior written consent from the Customer". That is a prior-consent requirement rather than notice, and it constrains changes to BB-Demo's infrastructure suppliers.
Not settled: the text sets no fixed breach notification hours, no price, no service levels and no named signatories. The term follows the main service agreement, whose date and renewal the document does not state. The signature lines are blank in the text, though both carry the date 17 Jan 2025.
As found in this document
Current to 9 Oct 26- Date signed17 Jan 2025Source: object_read:doc_027_005
- Processing instructionsBB-Demo shall process personal data only on documented instructions from the Customer and for the purpose of delivering the contracted services.BB-Demo shall process personal data only on documented instructions from the Customer and for the purpose of delivering the contracted services. · Source: object_read:doc_027_005
- Sub-processorsBB-Demo shall not engage sub-processors without prior written consent from the Customer.BB-Demo shall not engage sub-processors without prior written consent from the Customer. · Source: object_read:doc_027_005
- Data breach notificationBB-Demo shall notify the Customer of any confirmed data breach without undue delay and in accordance with statutory timeframes.BB-Demo shall notify the Customer of any confirmed data breach without undue delay and in accordance with statutory timeframes. · Source: object_read:doc_027_005
- Return or deletion of dataUpon termination of the main service agreement, BB-Demo shall, at the Customer's election, return or securely delete all personal data processed under this DPA.Upon termination of the main service agreement, BB-Demo shall, at the Customer's election, return or securely delete all personal data processed under this DPA. · Source: object_read:doc_027_005
The document
Body
Skovdal Software, Data Processing Agreement
Date Signed: 17 Jan 2025
Data Processing Agreement
This Data Processing Agreement ("DPA") is made between:
BB-Demo (hereinafter "Processor")
and
Skovdal Software (hereinafter "Customer")
1. Purpose
This DPA governs the processing of personal data by BB-Demo on behalf of Skovdal Software in the delivery of the Company Brain platform and ancillary services.
2. Scope of Processing
BB-Demo shall process personal data only on documented instructions from the Customer and for the purpose of delivering the contracted services. The Customer remains the data controller for purposes of data protection law.
3. Processor Responsibilities
BB-Demo shall:
(a) Process personal data only in accordance with the UK Data Protection Act 2018 and UK General Data Protection Regulation.
(b) Ensure staff authorised to process personal data are bound by confidentiality obligations.
(c) Implement and maintain appropriate technical and organisational security measures.
(d) Assist the Customer with data subject rights requests and regulatory compliance obligations.
Read the whole document (2,614 characters)
(e) Delete or return personal data upon service termination unless law requires retention.
4. Sub-processors
BB-Demo shall not engage sub-processors without prior written consent from the Customer. The Customer may object to any sub-processor replacement on reasonable grounds.
5. International Data Transfers
Any transfer of personal data outside the UK shall be governed by adequacy decisions or appropriate safeguards under UK data protection law.
6. Audit and Inspection
The Customer may conduct reasonable audits to verify BB-Demo's compliance with this DPA.
7. Data Breach Notification
BB-Demo shall notify the Customer of any confirmed data breach without undue delay and in accordance with statutory timeframes.
8. Term
This DPA shall commence on the date of the main service agreement and shall remain in force for its duration and any renewal period, unless earlier terminated.
9. Termination and Return of Data
Upon termination of the main service agreement, BB-Demo shall, at the Customer's election, return or securely delete all personal data processed under this DPA.
10. Governing Law
This DPA is governed by English law and the jurisdiction of the English courts.
Signature Block
For BB-Demo:
_________________________ Authorised Signatory BB-Demo Date: 17 Jan 2025
For Skovdal Software:
_________________________ Authorised Representative Skovdal Software Date: 17 Jan 2025
Unusual terms
Current to 9 Oct 26- Prior written consent required for sub-processors
- Customer audit right