What it says
What this says
As at Fri 9 Oct 2026Executed data processing agreement dated 16 Dec 2025 between Veldmaat Payments as controller and BG-Demo as processor, forming part of the MSA. It states no price, availability, response time or renewal term.
What it is: an executed DPA that "forms part of the Master Services Agreement between BG-Demo and Veldmaat Payments". Veldmaat is controller and BG-Demo is processor, covering HubSpot, Zendesk and Exact Online data.
Commits: BG-Demo to process personal data "only on Veldmaat's documented instructions", keep it confidential, apply security measures and report breaches "without undue delay". Sub-processors need prior written agreement, and data is returned or deleted on termination at Veldmaat's choice.
Unusual: nothing off the standard terms. Data stays in Veldmaat's own Snowflake account, moved only on written instruction.
Not settled: no breach notification deadline, no service levels, no price, no renewal date and no named signatories. The signature block gives only titles, Account Executive for BG-Demo and Head of Data for Veldmaat.
As found in this document
As at Fri 9 Oct 2026- Date signed16 Dec 2025Source: the AI read of this record
- Processing instructionsprocess personal data only on Veldmaat's documented instructionsSource: the AI read of this record
- Breach notificationtell Veldmaat without undue delay if it becomes aware of a personal data breachSource: the AI read of this record
- Location of dataVeldmaat's data stays in Veldmaat's own Snowflake accountSource: the AI read of this record
- Sub-processorsonly with Veldmaat's prior written agreementSource: the AI read of this record
- Return and deletionon termination, at Veldmaat's choice, return or delete personal data and confirm in writingSource: the AI read of this record
- Auditallow reasonable audits on noticeSource: the AI read of this record
Body
Veldmaat Payments - Data Processing Agreement (signed)
Executed on 16 Dec 2025. This agreement forms part of the Master Services Agreement between BG-Demo and Veldmaat Payments.
Parties
- Controller: Veldmaat Payments, Amsterdam.
- Processor: BG-Demo, London.
Definitions
Terms such as personal data, processing, controller, processor and data subject have the meaning given to them in applicable data protection law.
Subject matter and purpose
BG-Demo provides B-Glass to Veldmaat. The brain is built and runs inside Veldmaat's own Snowflake account and reads data from the sources Veldmaat connects: HubSpot, Zendesk and Exact Online. BG-Demo processes personal data only to provide that service.
Categories of data
- Contact and account details of Veldmaat's merchants and their staff.
- Support ticket content and history.
- Commercial and financial records held in the connected systems.
Processor obligations
BG-Demo will:
Read the whole document (2,137 characters)
- process personal data only on Veldmaat's documented instructions;
- keep personal data confidential and limit access to staff who need it;
- apply appropriate technical and organisational security measures;
- help Veldmaat respond to requests from data subjects and regulators;
- tell Veldmaat without undue delay if it becomes aware of a personal data breach.
Location of data
Veldmaat's data stays in Veldmaat's own Snowflake account. BG-Demo does not move it elsewhere except on Veldmaat's written instruction.
Sub-processors
BG-Demo will use a sub-processor only with Veldmaat's prior written agreement and will hold it to obligations no less protective than these.
Return and deletion
On termination, BG-Demo will stop processing and, at Veldmaat's choice, return or delete personal data it holds, and will confirm that in writing.
Audit
BG-Demo will give Veldmaat the information reasonably needed to show compliance with this agreement and will allow reasonable audits on notice.
Signatures
| For BG-Demo | For Veldmaat Payments |
|---|---|
| Title: Account Executive | Title: Head of Data |
| Date: 16 Dec 2025 | Date: 16 Dec 2025 |