Lindqvarn Retail - Data Processing Agreement (signed)
Documentexecuted Lindqvarn Retail · dpa · executed · 23 May 2025
Executed data processing agreement, version 1, effective 23 May 2025, between Lindqvarn Retail (Controller) and BG-Demo (Processor). It governs personal data handled in B-Glass inside the Controller's own Snowflake account. No price or service levels are stated.
What it says
What this says
As at Fri 9 Oct 2026Executed data processing agreement, version 1, effective 23 May 2025, between Lindqvarn Retail (Controller) and BG-Demo (Processor). It governs personal data handled in B-Glass inside the Controller's own Snowflake account. No price or service levels are stated.
What it is: an executed DPA that forms part of the Master Services Agreement. It covers the Controller's customer service, e-commerce and store feedback data, with processing "only on the Controller's documented instructions".
Commits: BG-Demo must use sub-processors only with "general written authorisation", tell the Controller before changing them, notify breaches "without undue delay", and delete or return data on written request or when the services end.
Unusual: the DPA prevails over the Master Services Agreement on personal data. Dedicated data residency "is not part of this agreement unless stated in an order form".
Not settled: the Controller's signatory is not named, only "authorised signatory". The text states no price, service levels, term or renewal date, and does not say whether any residency add-on was ordered.
As found in this document
As at Fri 9 Oct 2026- Date signed23 May 2025Source: the AI read of this record
- Date start23 May 2025Source: the AI read of this record
- Processing instructionsprocess personal data only on the Controller's documented instructionsSource: the AI read of this record
- Sub-processorsonly with the Controller's general written authorisationSource: the AI read of this record
- Breach notificationwithout undue delay after becoming aware of a personal data breachSource: the AI read of this record
- Return and deletiondelete or return personal data on written request or when the services end, and confirm in writingSource: the AI read of this record
- International transfersno transfer outside the Controller's chosen region unless the Controller agrees and a lawful transfer mechanism is in placeSource: the AI read of this record
The document
Body
Lindqvarn Retail - Data Processing Agreement (signed)
Status: Executed Version: 1 Effective date: 23 May 2025
1. Parties and background
1.1 This Data Processing Agreement is made between Lindqvarn Retail, headquartered in Stockholm (the "Controller"), and BG-Demo, a London data business (the "Processor").
1.2 It forms part of the Master Services Agreement between the parties and applies whenever the Processor handles personal data on the Controller's behalf in providing B-Glass.
2. Subject matter and nature of processing
2.1 The Processor provides a single AI-queryable layer over the Controller's customer service, e-commerce and store feedback data.
2.2 The brain is built and run inside the Controller's own Snowflake account. The Processor does not move the Controller's data out of that account except as the Controller instructs in writing.
2.3 The purpose of processing is to deliver, support and improve the services for the Controller, and nothing else.
3. Categories of data and data subjects
Read the whole document (4,011 characters)
| Item | Description |
|---|---|
| Data subjects | The Controller's customers, store visitors who give feedback, and the Controller's own staff who use the brain |
| Categories of data | Contact details, order and service history, feedback content and the usernames of staff users |
| Special categories | None are expected; the Controller will tell the Processor before any are connected |
4. Processor obligations
The Processor will:
- process personal data only on the Controller's documented instructions;
- ensure that everyone with access is bound by confidentiality;
- apply appropriate technical and organisational security measures, including access control and logging inside the Controller's Snowflake account;
- help the Controller respond to requests from data subjects, in a reasonable time;
- help the Controller with security reviews, impact assessments and audits, within reason.
5. Sub-processors
5.1 The Processor will use sub-processors only with the Controller's general written authorisation.
5.2 The Processor will tell the Controller before adding or replacing a sub-processor and will give the Controller a fair chance to object.
5.3 The Processor stays responsible for any sub-processor it appoints.
6. International transfers
The Processor will not transfer personal data outside the Controller's chosen region unless the Controller agrees and an appropriate lawful transfer mechanism is in place. Dedicated data residency is available as an add-on and is not part of this agreement unless stated in an order form.
7. Personal data breaches
7.1 The Processor will tell the Controller without undue delay after becoming aware of a personal data breach affecting the Controller's data.
7.2 The notice will describe what is known about the nature of the breach, the data concerned, the likely consequences and the steps being taken.
8. Return and deletion
On the Controller's written request, or when the services end, the Processor will delete the personal data it holds or return it, and will confirm in writing that it has done so. Because the brain runs inside the Controller's own Snowflake account, the Controller keeps control of the underlying data throughout.
9. Audit
The Processor will provide the information reasonably needed to show compliance with this agreement and will allow audits by the Controller or an auditor it appoints, on reasonable notice and during business hours.
10. Governing terms
If this agreement conflicts with the Master Services Agreement on the processing of personal data, this agreement prevails. Applicable data protection law governs the matters covered here.
11. Signatures
Signed on 23 May 2025.
| For BG-Demo (Processor) | For Lindqvarn Retail (Controller) |
|---|---|
| Name: Tom Ashdown | Name: authorised signatory |
| Title: Account Executive | Title: authorised signatory for Lindqvarn Retail |
| Date: 23 May 2025 | Date: 23 May 2025 |
Unusual terms
As at Fri 9 Oct 2026- DPA prevails over the MSA on personal data
- Data residency add-on excluded unless in an order form
- Controller signatory not named