Linthorpe Trade Supplies - Data Processing Agreement (signed)
Documentexecuted Linthorpe Trade Supplies: documents · dpa · executed · 2024-08-05
Executed Data Processing Agreement between BB-Demo Ltd (Processor) and Linthorpe Trade Supplies (Controller), signed 5 Aug 2024 under the MSA of the same date. It sets processing, security, deletion and audit duties. It states no price, availability or response times.
What it says
What this says
Current to 11 Oct 26Executed Data Processing Agreement between BB-Demo Ltd (Processor) and Linthorpe Trade Supplies (Controller), signed 5 Aug 2024 under the MSA of the same date. It sets processing, security, deletion and audit duties. It states no price, availability or response times.
What it is: a DPA that "supplements the Master Services Agreement dated 5 August 2024". Both parties' authorised signatories are dated 5 Aug 2024, so the executed state matches the stored status.
Commits: BB-Demo processes personal data "only on documented instructions from the Controller". On termination it must "delete or return all personal data at the Controller's election", and it must assist with data subject rights requests within statutory timeframes.
Unusual: nothing off the standard terms. Sub-processors are allowed, but the Controller may object to a new or replacement one on reasonable grounds. Transfers outside the UK must use Standard Contractual Clauses or other approved mechanisms.
Not settled: liability is "as set out in the MSA", which is not in this document. No named signatories, notice periods, security standards or fixed response times appear.
As found in this document
Current to 9 Oct 26- Date signed5 Aug 2024Source: object_read:doc_094_005
- Processing scopeonly on documented instructions from the Controller and for no other purpose than to provide the Company Brain serviceonly on documented instructions from the Controller and for no other purpose than to provide the Company Brain service · Source: object_read:doc_094_005
- Data subject rightsassist the Controller in fulfilling data subject rights requests (access, rectification, erasure, portability, objection) within statutory timeframesassist the Controller in fulfilling data subject rights requests (access, rectification, erasure, portability, objection) within statutory timeframes · Source: object_read:doc_094_005
- Deletion and returndelete or return all personal data at the Controller's election in accordance with applicable law, unless law requires retentiondelete or return all personal data at the Controller's election in accordance with applicable law, unless law requires retention · Source: object_read:doc_094_005
- International transferscomply with applicable UK data protection law, using Standard Contractual Clauses or other approved mechanismscomply with applicable UK data protection law, using Standard Contractual Clauses or other approved mechanisms · Source: object_read:doc_094_005
The document
Body
Linthorpe Trade Supplies, Data Processing Agreement
Executed 5 August 2024
This Data Processing Agreement ("DPA") supplements the Master Services Agreement dated 5 August 2024 between BB-Demo Ltd ("Processor") and Linthorpe Trade Supplies ("Controller").
1. Processing scope
The Processor shall process personal data only on documented instructions from the Controller and for no other purpose than to provide the Company Brain service.
2. Security
The Processor shall implement and maintain appropriate technical and organisational security measures to protect all personal data against unauthorised processing, accidental loss or damage.
3. Sub-processors
The Processor may engage sub-processors. The Controller may object to any new or replacement sub-processor on reasonable grounds relating to conflict of interest, lack of safeguards or non-compliance with data protection law.
4. Data subject rights
The Processor shall assist the Controller in fulfilling data subject rights requests (access, rectification, erasure, portability, objection) within statutory timeframes.
5. Deletion and return
Read the whole document (1,941 characters)
Upon termination or end of the MSA, the Processor shall delete or return all personal data at the Controller's election in accordance with applicable law, unless law requires retention.
6. Audit and inspection
The Processor shall provide all information necessary to demonstrate DPA compliance and shall permit audits and inspections as required by law or reasonable request.
7. International transfers
Any transfer of personal data outside the UK shall comply with applicable UK data protection law, using Standard Contractual Clauses or other approved mechanisms.
8. Liability
The Processor's liability under this DPA shall be as set out in the MSA.
Execution
BB-Demo Ltd
Authorised signatory
5 August 2024
Linthorpe Trade Supplies
Authorised signatory
5 August 2024