LEGAL
Data Processing AgreementData Processing Agreement
This Data Processing Agreement (“Agreement”) is entered into between D&I Recruitment Ltd (“Data Controller”) and the company providing data processing services, hereinafter referred to as the “Data Processor.” This Agreement governs the processing of personal data by the Data Processor on behalf of the Data Controller.
1. Definitions
1.1 “Data Controller” refers to D&I Recruitment Ltd, the entity that determines the purposes and means of the processing of personal data.
1.2 “Data Processor” refers to the company providing data processing services on behalf of the Data Controller.
1.3 “Personal Data” refers to any information relating to an identified or identifiable natural person (data subject) as defined by the data protection laws and regulations applicable in the United Kingdom.
1.4 “Processing” refers to any operation performed on personal data, such as collection, recording, organization, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, erasure, or destruction.
1.5 “Subprocessor” refers to any third party engaged by the Data Processor to process personal data on behalf of the Data Controller.
2. Scope and Purpose
2.1 The Data Controller engages the Data Processor to process personal data for the purposes specified in the Service Agreement between the parties.
2.2 The Data Processor agrees to process the personal data only on documented instructions from the Data Controller, unless required to do so by applicable laws. In such cases, the Data Processor shall inform the Data Controller of the legal requirement before processing, unless prohibited by law.
3. Obligations of the Data Processor
3.1 Confidentiality: The Data Processor shall ensure that any person authorized to process personal data on their behalf is under appropriate confidentiality obligations.
3.2 Security Measures: The Data Processor shall implement appropriate technical and organizational measures to ensure the security of personal data and protect it against unauthorized or unlawful processing, accidental loss, destruction, or damage.
3.3 Data Protection Officer: The Data Processor shall designate a Data Protection Officer (DPO), if required by applicable data protection laws, and provide the contact details of the DPO to the Data Controller.
3.4 Subprocessors: The Data Processor shall not engage any Subprocessor without prior written authorization from the Data Controller. Where Subprocessors are engaged, the Data Processor shall ensure that appropriate data protection obligations are imposed on the Subprocessors.
3.5 Cross-Border Transfers: If the personal data is transferred to a country outside the United Kingdom or the European Economic Area (EEA), the Data Processor shall ensure that appropriate safeguards are in place to protect the personal data, as required by applicable data protection laws.
3.6 Data Subject Rights: The Data Processor shall assist the Data Controller, as reasonably necessary, to fulfill its obligations to respond to requests from data subjects exercising their rights under applicable data protection laws.
3.7 Breach Notification: The Data Processor shall promptly notify the Data Controller in the event of a personal data breach, providing all necessary information and cooperating in any investigation or mitigation efforts.
4. Duration and Termination
4.1 This Agreement shall remain in effect for the duration of the Service Agreement between the parties.
4.2 Upon termination or expiry of the Service Agreement, the Data Processor shall, at the choice of the Data Controller, delete or return all personal data to the Data Controller and delete any existing copies unless otherwise required by law.
5. Governing Law and Jurisdiction
5.1 This Agreement shall be governed by and construed in accordance with the laws of the United Kingdom.
5.2 Any disputes arising out of or in connection with this Agreement shall be subject to the exclusive jurisdiction of the courts of the United Kingdom.
Data Controller:
-D&I Recruitment Ltd
Data Processors:
-Amazon Web Services
