Hollins Tarrant - Data Processing Agreement (signed)
Documentexecuted Hollins Tarrant: documents · dpa · executed · 2023-12-13
Executed data processing agreement under the master services agreement, signed 13 Dec 2023. It governs how B-Brain handles Hollins Tarrant's personal data, which stays in the customer's own Snowflake account. It carries no price, term or renewal.
What it says
What this says
Current to 10 Oct 26Executed data processing agreement under the master services agreement, signed 13 Dec 2023. It governs how B-Brain handles Hollins Tarrant's personal data, which stays in the customer's own Snowflake account. It carries no price, term or renewal.
What it is: an executed DPA between Hollins Tarrant (the customer, deciding why and how data is used) and B-Brain (the supplier). It sits under the master services agreement and was signed 13 Dec 2023.
Commits: B-Brain will act "only on the customer's documented instructions" and will not copy data out of the customer's Snowflake account unless instructed in writing. It must tell the customer of a breach "without undue delay" and allow reasonable audits.
Unusual: sub-processors need the customer's prior written consent, which is stricter than a notice-only approach. On exit, B-Brain removes its own access and working copies and confirms in writing if asked.
Not settled: the document states no price, term, renewal date or breach notification deadline in hours. The signature table gives a name for Tom Ashdown only; the Hollins Tarrant signatory is listed by title, not name.
As found in this document
Current to 9 Oct 26- Date signed13 Dec 2023Source: object_read:doc_004_005
- InstructionsB-Brain will act only on the customer's documented instructionsB-Brain will act only on the customer's documented instructions · Source: object_read:doc_004_005
- Location of dataThe customer's data stays in the customer's own Snowflake accountThe customer's data stays in the customer's own Snowflake account · Source: object_read:doc_004_005
- Sub-processorsNot used without the customer's prior written consentNot used without the customer's prior written consent · Source: object_read:doc_004_005
- Breach notificationTell the customer without undue delayTell the customer without undue delay · Source: object_read:doc_004_005
- AuditReasonable audits on reasonable notice and during business hoursReasonable audits on reasonable notice and during business hours · Source: object_read:doc_004_005
The document
Body
Hollins Tarrant - Data Processing Agreement (signed)
Status: Executed Signed: 13 Dec 2023
This agreement sits under the master services agreement between B-Brain and Hollins Tarrant and governs how B-Brain handles personal data on behalf of Hollins Tarrant.
Parties
- Hollins Tarrant, a recruitment firm based in Bristol (the customer). The customer decides why and how personal data is used.
- B-Brain, a London data business (the supplier). B-Brain handles that data only on the customer's behalf.
Subject matter and purpose
B-Brain builds and runs the company brain inside the customer's own Snowflake account. In doing so it may handle personal data held in the customer's connected systems, such as client contacts in the CRM, candidate and placement records, and client-facing support tickets. B-Brain will handle that data only to provide the services described in the master services agreement.
Instructions
Read the whole document (3,132 characters)
B-Brain will act only on the customer's documented instructions, which include the master services agreement, the order form and the configuration of the connected sources. If B-Brain believes an instruction breaches data protection law, it will tell the customer promptly.
Location of the data
The customer's data stays in the customer's own Snowflake account. B-Brain will not copy it out of that account or move it elsewhere, except where the customer instructs it to in writing.
Confidentiality
Everyone at B-Brain who can reach the customer's data is bound by a duty of confidence, and access is limited to those who need it to deliver the services.
Security
B-Brain will keep appropriate technical and organisational measures in place to protect the customer's data, including access controls, separation of customer environments and logging of access to the brain.
Sub-processors
B-Brain will not use another organisation to handle the customer's personal data without the customer's prior written consent. Where it does, it will bind that organisation to terms no less protective than these.
Requests from individuals
If a person asks to exercise rights over their data, B-Brain will help the customer to respond within the time the law allows, and will pass on to the customer any request it receives directly.
Personal data breaches
B-Brain will tell the customer without undue delay if it becomes aware of a breach affecting the customer's data, and will give the customer the information it needs to meet its own obligations.
Audit
B-Brain will make available the information needed to show compliance with this agreement and will allow reasonable audits by the customer, on reasonable notice and during business hours.
Return and deletion
When the services end, the customer's data remains in the customer's own Snowflake account. B-Brain will remove its own access and any working copies it holds, and will confirm this in writing if asked.
Signatures
| Hollins Tarrant | B-Brain | |
|---|---|---|
| Name | Tom Ashdown | |
| Title | Authorised signatory | Account Executive |
| Date signed | 13 Dec 2023 | 13 Dec 2023 |
Unusual terms
Current to 9 Oct 26- prior written consent for sub-processors
- written confirmation of removal of access on exit if asked