What it says
What this says
Current to 11 Oct 26Executed DPA signed on 25 Oct 2024 between Dunholm Precision (controller) and B-Brain (processor). Data stays in the customer's own Snowflake account and no transfers outside the United Kingdom without written agreement. It states no price, availability or response-time figures.
What it is: an executed data processing agreement, version 1, under the master agreement. B-Brain acts only on the customer's documented instructions, inside "the customer's own Snowflake account".
Commits: B-Brain will not engage another party to handle personal data "without the customer's prior written authorisation" and will tell the customer "without undue delay" of a breach. It will not transfer data outside the United Kingdom without written agreement and a lawful transfer mechanism.
Unusual: the customer gets an audit right on reasonable notice. No fixed breach-notice period is given. Nothing departs materially from a standard processor agreement.
Not settled: the customer signatory is shown only as "Authorised signatory", with no named person. Service levels, fees, term and renewal sit in the order form and master agreement, which this document does not contain. Liability follows the master agreement.
As found in this document
Current to 9 Oct 26- Date signed25 Oct 2024Source: object_read:doc_018_006
- Data locationB-Brain will keep the data within that Snowflake account and will not copy it elsewhere without the customer's written agreement.B-Brain will keep the data within that Snowflake account and will not copy it elsewhere without the customer's written agreement. · Source: object_read:doc_018_006
- Sub-processorsB-Brain will not engage another party to handle the customer's personal data without the customer's prior written authorisation.B-Brain will not engage another party to handle the customer's personal data without the customer's prior written authorisation. · Source: object_read:doc_018_006
- Breach notificationB-Brain will tell the customer without undue delay after becoming aware of a personal data breach affecting the customer's data.B-Brain will tell the customer without undue delay after becoming aware of a personal data breach affecting the customer's data. · Source: object_read:doc_018_006
- International transfersB-Brain will not transfer the customer's personal data outside the United Kingdom unless the customer has agreed in writing and a lawful transfer mechanism is in place.B-Brain will not transfer the customer's personal data outside the United Kingdom unless the customer has agreed in writing and a lawful transfer mechanism is in place. · Source: object_read:doc_018_006
- AuditThe customer may carry out, or appoint someone to carry out, an audit on reasonable notice, during business hours and without unreasonable disruption to B-Brain.The customer may carry out, or appoint someone to carry out, an audit on reasonable notice, during business hours and without unreasonable disruption to B-Brain. · Source: object_read:doc_018_006
- Return and deletionAt the customer's choice, return the personal data or delete it, and remove its own access to the customer's Snowflake account.At the customer's choice, return the personal data or delete it, and remove its own access to the customer's Snowflake account. · Source: object_read:doc_018_006
The document
Body
Unusual terms
Current to 9 Oct 26- Customer audit right on reasonable notice
- No data transfer outside the United Kingdom without written agreement
- Written confirmation of deletion required