Kralingse Expeditie - Data Processing Agreement (signed)
Documentexecuted Kralingse Expeditie · dpa · executed · 2 Jan 2026
Executed data processing agreement signed 2 Jan 2026 between Kralingse Expeditie (Controller) and BG-Demo (Processor), alongside the Master Services Agreement. It states no price, availability or response times.
What it says
What this says
As at Fri 9 Oct 2026Executed data processing agreement signed 2 Jan 2026 between Kralingse Expeditie (Controller) and BG-Demo (Processor), alongside the Master Services Agreement. It states no price, availability or response times.
What it is: an executed DPA, version 1, signed on 2 Jan 2026. It applies "for as long as BG-Demo processes personal data for the Controller" and sits alongside the Master Services Agreement signed the same day.
Commits: BG-Demo to process personal data "only on the Controller's documented instructions", to keep staff access to need, to tell the Controller of a breach "without undue delay", and to return or delete data when services end.
Unusual: no sub-processor may be engaged "without the Controller's prior written authorisation". Clause K makes this agreement prevail over the Master Services Agreement on personal data handling.
Not settled: the text states no price, service levels, term, end date or renewal. The customer signatory is named only as "Authorised signatory", so their identity and seniority are not shown. Breach notification has no fixed hours.
As found in this document
As at Fri 9 Oct 2026- Date signed2 Jan 2026Source: the AI read of this record
- InstructionsBG-Demo will process personal data only on the Controller's documented instructionsSource: the AI read of this record
- Sub-processorsBG-Demo will not engage another processor for the Controller's personal data without the Controller's prior written authorisationSource: the AI read of this record
- Personal data breachesBG-Demo will tell the Controller without undue delay once it becomes aware of a personal data breachSource: the AI read of this record
- Return and deletionWhen the services end, BG-Demo will, at the Controller's choice, return or delete personal data it holds for the ControllerSource: the AI read of this record
- Auditreasonable audits by the Controller, on reasonable noticeSource: the AI read of this record
The document
Body
Kralingse Expeditie - Data Processing Agreement (signed)
Status: Executed. Version 1. Signed on 2 Jan 2026.
Parties
This Data Processing Agreement is between Kralingse Expeditie, of Rotterdam ("the Controller"), and BG-Demo, of London ("the Processor"). It sits alongside the Master Services Agreement signed on the same day and applies for as long as BG-Demo processes personal data for the Controller.
Clause A: Subject and nature of processing
BG-Demo provides B-Viz, a queryable layer over the Controller's business systems. B-Viz is built and run inside the Controller's own Snowflake account. The Controller decides which systems are connected and which data is made available.
Clause B: Categories of data and people
The data may include records about the Controller's staff, its importer customers and their contacts, found in shipment records, calls, emails, tickets and invoices. The Controller is responsible for deciding that the data it connects may lawfully be processed.
Clause C: Instructions
Read the whole document (3,191 characters)
BG-Demo will process personal data only on the Controller's documented instructions, which include the Master Services Agreement and this agreement. If BG-Demo believes an instruction breaches applicable data protection law, it will tell the Controller promptly.
Clause D: Confidentiality
Everyone at BG-Demo who can access personal data is bound by a duty of confidentiality and has access only where their work requires it.
Clause E: Security
Because B-Viz runs inside the Controller's own Snowflake account, the Controller's own access controls and security settings continue to apply. BG-Demo will keep appropriate technical and organisational measures in place for the parts of the service it operates.
Clause F: Sub-processors
BG-Demo will not engage another processor for the Controller's personal data without the Controller's prior written authorisation, and will bind any approved sub-processor to terms no less protective than these.
Clause G: Assistance
BG-Demo will help the Controller, within reason, to respond to requests from individuals exercising their rights, and with security reviews, impact assessments and consultations with a regulator.
Clause H: Personal data breaches
BG-Demo will tell the Controller without undue delay once it becomes aware of a personal data breach affecting the Controller's data, with the information it has so the Controller can meet its own obligations.
Clause I: Return and deletion
When the services end, BG-Demo will, at the Controller's choice, return or delete personal data it holds for the Controller, unless the law requires it to keep it.
Clause J: Audit
BG-Demo will make available the information reasonably needed to show compliance with this agreement and will allow reasonable audits by the Controller, on reasonable notice.
Clause K: Governing terms
If this agreement conflicts with the Master Services Agreement on the handling of personal data, this agreement prevails.
Signatures
For BG-Demo
Name: Matteo Ricci Title: Account Executive Date: 2 Jan 2026
For Kralingse Expeditie
Title: Authorised signatory Date: 2 Jan 2026
Unusual terms
As at Fri 9 Oct 2026- Prior written authorisation for sub-processors
- DPA prevails over the MSA on personal data