What it says
What this says
Current to 13 Oct 26Executed DPA under the Master Services Agreement dated 28 November 2023, with BB-Demo as Processor and Stainmore Haulage as Controller. Effective from 28 November 2023 for the duration of the Services. It states no price, availability or response times.
What it is: a data processing agreement signed 14 November 2023, filed in the customer's Contracts folder. It covers personal data BB-Demo processes for Stainmore Haulage under the Master Services Agreement dated 28 November 2023.
Commits: the Processor acts "only on documented instructions from the Controller" and will not "engage sub-processors without the Controller's prior written authorisation". Transfers outside the UK or EU need prior written approval, and personal data is deleted or returned on termination.
Unusual: nothing off standard terms. There are no service levels, credits, prices or notice periods.
Not settled: the signature blocks show printed dates and names, but the customer signatory is only titled Director with no name. The document does not state a renewal date, and it ends only with the Services.
As found in this document
Current to 9 Oct 26- Date signed14 Nov 2023Source: object_read:doc_181_005
- Date start28 Nov 2023Source: object_read:doc_181_005
- Processing instructionsThe Processor processes personal data only on documented instructions from the ControllerThe Processor processes personal data only on documented instructions from the Controller · Source: object_read:doc_181_005
- Sub-processorsNot engage sub-processors without the Controller's prior written authorisationNot engage sub-processors without the Controller's prior written authorisation · Source: object_read:doc_181_005
- International transfersAny transfer of personal data outside the UK or EU requires the Controller's prior written approval and appropriate safeguardsAny transfer of personal data outside the UK or EU requires the Controller's prior written approval and appropriate safeguards · Source: object_read:doc_181_005
- DeletionOn termination, delete or return all personal data processed under this agreement at the Controller's directionOn termination, delete or return all personal data processed under this agreement at the Controller's direction · Source: object_read:doc_181_005
- TermEffective from 28 November 2023 and continues for the duration of the ServicesEffective from 28 November 2023 and continues for the duration of the Services · Source: object_read:doc_181_005
The document
Body
Stainmore Haulage - Data Processing Agreement (signed)
1. Introduction
This Data Processing Agreement ("DPA") applies to the processing of personal data by BB-Demo Ltd ("Processor") on behalf of Stainmore Haulage ("Controller") under the Master Services Agreement dated 28 November 2023.
2. Scope and definitions
"Personal data" means any information relating to an identified or identifiable natural person. "Processing" means any operation performed on personal data, including collection, storage, use or disclosure. "Processor" means BB-Demo; "Controller" means the Customer.
3. Processing instructions
The Processor processes personal data only on documented instructions from the Controller, including regarding transfers outside the UK or EU.
4. Processor obligations
The Processor will:
Read the whole document (2,056 characters)
- Ensure that authorised persons are bound by confidentiality obligations
- Implement appropriate technical and organisational measures to protect personal data
- Not engage sub-processors without the Controller's prior written authorisation
- Assist the Controller in responding to data subject rights requests
- Make available all information necessary to demonstrate compliance and allow audits
5. International transfers
Any transfer of personal data outside the UK or EU requires the Controller's prior written approval and appropriate safeguards.
6. Data security
The Processor maintains information security aligned with UK and EU data protection requirements, including access controls, encryption and incident response.
7. Deletion
On termination, the Processor will, at the Controller's direction, delete or return all personal data processed under this agreement.
8. Term
This DPA is effective from 28 November 2023 and continues for the duration of the Services.
Signatures
For and on behalf of BB-Demo Ltd:
_________________________
Tom Ashdown Account Executive 14 November 2023
For and on behalf of Stainmore Haulage:
_________________________
Director 14 November 2023