Brakkevoort Logistics - Data Processing Agreement (signed)
Documentexecuted Brakkevoort Logistics · dpa · executed · 2025-03-21
Executed data processing agreement between Brakkevoort Logistics (Controller) and BB-Demo (Processor), signed on 21 Mar 2025. It sits alongside the Master Services Agreement. It states no price, service levels or renewal terms.
What it says
What this says
Current to 13 Oct 26Executed data processing agreement between Brakkevoort Logistics (Controller) and BB-Demo (Processor), signed on 21 Mar 2025. It sits alongside the Master Services Agreement. It states no price, service levels or renewal terms.
What it is: a data processing agreement that forms part of the Master Services Agreement. It covers the company brain over the Controller's CRM, call, email and ticket data.
Commits: the Processor acts only on "documented instructions", needs "prior written authorisation" for any other processor, and must notify breaches "without undue delay". On exit it returns or deletes personal data at the Controller's choice.
Unusual: the data stays in the Controller's own Snowflake account and moves only as the Controller instructs in writing. If the DPA and the Master Services Agreement conflict on personal data, the DPA applies.
Not settled: no price, availability, response times, term or renewal date. The Controller's signatory is named only as "Authorised signatory", so the evidence does not show who signed.
As found in this document
Current to 9 Oct 26- Date signed21 Mar 2025Source: object_read:doc_024_006
- InstructionsThe Processor will process personal data only on the Controller's documented instructionsThe Processor will process personal data only on the Controller's documented instructions · Source: object_read:doc_024_006
- Location of the dataThe brain is built and run inside the Controller's own Snowflake accountThe brain is built and run inside the Controller's own Snowflake account · Source: object_read:doc_024_006
- Sub-processorsThe Processor will not engage another processor without the Controller's prior written authorisationThe Processor will not engage another processor without the Controller's prior written authorisation · Source: object_read:doc_024_006
- Personal data breachThe Processor will notify the Controller without undue delay after becoming aware of a personal data breachThe Processor will notify the Controller without undue delay after becoming aware of a personal data breach · Source: object_read:doc_024_006
- Return and deletionWhen the services end, the Processor will, at the Controller's choice, return or delete the personal dataWhen the services end, the Processor will, at the Controller's choice, return or delete the personal data · Source: object_read:doc_024_006
The document
Body
Brakkevoort Logistics - Data Processing Agreement (signed)
Status: Executed. Signed on 21 Mar 2025.
Parties
- Brakkevoort Logistics, of Rotterdam ("the Controller").
- BB-Demo, a London data business ("the Processor").
This agreement sits alongside the Master Services Agreement between the same parties and forms part of it.
Purpose and scope
The Processor provides the company brain to the Controller. The brain brings together the Controller's CRM, call, email and ticket data so that its account managers can see shipper accounts, exception tickets and calls together. In doing so the Processor handles personal data on the Controller's behalf. This agreement sets out the terms on which it does that.
Subject matter of the processing
Read the whole document (3,901 characters)
| Item | Description |
|---|---|
| Subject matter | Provision of the company brain to the Controller |
| Duration | The term of the Master Services Agreement, and for as long afterwards as the Processor holds personal data on the Controller's behalf |
| Nature of processing | Indexing, storing, searching and presenting data from the systems the Controller chooses to connect |
| Types of personal data | Business contact details, names, job titles and the content of business communications and tickets |
| Data subjects | The Controller's staff and its shippers' and suppliers' contacts |
Clauses
Instructions
The Processor will process personal data only on the Controller's documented instructions, including with regard to any transfer, unless required to do otherwise by law. If it is required to do so, it will tell the Controller first, unless the law forbids this.
Location of the data
The brain is built and run inside the Controller's own Snowflake account. The Processor does not move the Controller's data out of that account except as the Controller instructs in writing.
Confidentiality
The Processor will make sure that everyone authorised to process the personal data is bound by a duty of confidentiality.
Security
The Processor will keep appropriate technical and organisational measures in place to protect personal data against accidental or unlawful destruction, loss, alteration, disclosure or access. These include role-based access, separation of customer environments and logging of administrative access.
Sub-processors
The Processor will not engage another processor without the Controller's prior written authorisation. Where it does, it will bind that processor to terms no less protective than these and remain responsible for its performance.
Assistance
The Processor will help the Controller, taking into account the nature of the processing, to respond to requests from data subjects and to meet its own obligations on security, breach notification and impact assessments.
Personal data breach
The Processor will notify the Controller without undue delay after becoming aware of a personal data breach affecting the Controller's data, and will give the information the Controller reasonably needs to meet its own duties.
Return and deletion
When the services end, the Processor will, at the Controller's choice, return or delete the personal data, and will delete existing copies unless the law requires them to be kept.
Audit
The Processor will make available the information needed to show compliance with this agreement and will allow and contribute to reasonable audits by the Controller or its appointed auditor.
Governing terms
This agreement is read together with the Master Services Agreement. If the two conflict on the handling of personal data, this agreement applies.
Signatures
Signed for and on behalf of BB-Demo (the Processor)
Name: Tom Ashdown Title: Account Executive Date: 21 Mar 2025
Signed for and on behalf of Brakkevoort Logistics (the Controller)
Title: Authorised signatory Date: 21 Mar 2025
Unusual terms
Current to 9 Oct 26- Data stays in the Controller's Snowflake account
- DPA prevails over the MSA on personal data
- Audit rights for the Controller