What it says
What this says
Current to 11 Oct 26Executed Data Processing Agreement between Brinkerhof Distributie (controller) and BB-Demo (processor), dated 10 Nov 2025. It forms part of the MSA and order form. It states no price, availability or response-time figures.
What it is: an executed DPA under which Brinkerhof Distributie is controller and BB-Demo is processor. It "forms part of the Master Services Agreement and the order form" for the Company Brain subscription.
Commits: BB-Demo processes personal data only on documented instructions, applies appropriate technical and organisational measures, tells the customer "without undue delay" of a breach, and deletes or returns data at the end of the services.
Unusual: sub-processors are generally authorised, with notice of changes and a fair opportunity to object. Audits are allowed on reasonable notice and during business hours.
Not settled: the customer signatory is only "Authorised signatory", so the evidence does not show who signed. It sets no price, service levels, term or renewal date; those sit in the order form and MSA.
As found in this document
Current to 9 Oct 26- Date signed10 Nov 2025Source: object_read:doc_086_006
- Processing instructionsprocess personal data only on the Customer's documented instructions, including with regard to transfersprocess personal data only on the Customer's documented instructions, including with regard to transfers · Source: object_read:doc_086_006
- Breach notificationtell the Customer without undue delay after becoming aware of a personal data breachtell the Customer without undue delay after becoming aware of a personal data breach · Source: object_read:doc_086_006
- End of servicesdelete or return personal data at the end of the services, at the Customer's choice, unless the law requires it to be keptdelete or return personal data at the end of the services, at the Customer's choice, unless the law requires it to be kept · Source: object_read:doc_086_006
- International transfersensure that a lawful transfer mechanism is in place before the transfer takes placeensure that a lawful transfer mechanism is in place before the transfer takes place · Source: object_read:doc_086_006
- Auditallow audits by the Customer or its appointed auditor, on reasonable notice and during business hoursallow audits by the Customer or its appointed auditor, on reasonable notice and during business hours · Source: object_read:doc_086_006
The document
Body
Brinkerhof Distributie - Data Processing Agreement (signed)
Status: Executed Date of agreement: 10 Nov 2025
Parties
This Data Processing Agreement is made between:
- Brinkerhof Distributie, of Eindhoven, the Netherlands (the "Customer"), acting as controller; and
- BB-Demo, a London data business (the "Supplier"), acting as processor.
It forms part of the Master Services Agreement and the order form between the parties for the Company Brain subscription.
Background
The Customer is a wholesaler of electrical installation materials. It uses the Supplier's Company Brain so that its account managers can see each installer's orders, delivery complaints and credit queries in one view. The Company Brain runs inside the Customer's own Snowflake account, so the Customer's data stays in an environment the Customer controls.
Definitions
Terms such as personal data, processing, controller, processor and data subject have the meanings given in the data protection law that applies to the Customer.
Subject matter and purpose
Read the whole document (3,502 characters)
The Supplier processes personal data only to provide, support and maintain the Company Brain for the Customer, and only for the duration of the agreement between the parties.
Categories of data and data subjects
| Item | Description |
|---|---|
| Data subjects | Contacts at the Customer's installer customers, the Customer's own staff and its suppliers |
| Categories of data | Business contact details, order history, delivery complaint records, credit query records and the content of connected business systems |
| Special categories | None expected, and the Customer will not load any |
Supplier obligations
The Supplier shall:
- process personal data only on the Customer's documented instructions, including with regard to transfers;
- ensure that anyone authorised to process the data is bound by confidentiality;
- apply appropriate technical and organisational measures to protect the data;
- assist the Customer, so far as possible, in answering requests from data subjects;
- tell the Customer without undue delay after becoming aware of a personal data breach;
- delete or return personal data at the end of the services, at the Customer's choice, unless the law requires it to be kept.
Sub-processors
The Customer gives general authorisation for the Supplier to use sub-processors needed to deliver the service. The Supplier will keep an up-to-date list, tell the Customer of intended changes, and give the Customer a fair opportunity to object. The Supplier remains responsible for its sub-processors.
International transfers
Where personal data is transferred outside the European Economic Area, the Supplier will ensure that a lawful transfer mechanism is in place before the transfer takes place.
Audit
The Supplier will make available the information reasonably needed to show compliance with this agreement and will allow audits by the Customer or its appointed auditor, on reasonable notice and during business hours.
Governing law
This agreement is governed by the law that governs the Master Services Agreement.
Signatures
Signed for and on behalf of the parties on 10 Nov 2025.
| For BB-Demo | For Brinkerhof Distributie | |
|---|---|---|
| Name | Tom Ashdown | Authorised signatory |
| Title | Account Executive | Authorised signatory of the Customer |
| Date | 10 Nov 2025 | 10 Nov 2025 |
BB-Demo account owner: Matteo Ricci Customer success manager: Elena Novak
Unusual terms
Current to 9 Oct 26- General authorisation for sub-processors with right to object
- Audit rights for the customer or its auditor