Sprotbrough Recruitment - Data Processing Agreement (signed)
Documentexecuted Sprotbrough Recruitment · dpa · executed · 17 Jul 2023
Executed DPA signed on 17 Jul 2023. Sprotbrough Recruitment is Controller and BG-Demo is Processor for B-Viz, which runs in the Controller's own Snowflake account. It states no availability, response time or price.
What it says
What this says
As at Fri 9 Oct 2026Executed DPA signed on 17 Jul 2023. Sprotbrough Recruitment is Controller and BG-Demo is Processor for B-Viz, which runs in the Controller's own Snowflake account. It states no availability, response time or price.
What it is: a data processing agreement that sits alongside the master agreement and the order form. It says BG-Demo "acts only as Processor" and processes personal data only on the Controller's documented instructions.
Commits: BG-Demo to confidentiality, security, help with data subject requests, and breach notice "without undue delay". It also commits BG-Demo to bind sub-processors to equivalent terms, to allow audits on reasonable notice, and to return or delete data at the Controller's choice.
Unusual: nothing off the standard commercial terms. Transfers outside the United Kingdom need a lawful transfer mechanism and the Controller must be informed. Sub-processor authorisation is general, with notice of changes.
Not settled: no price, term length, renewal date, service level or connector date appears. Those sit in the order form, which is not in this document. The Sprotbrough Recruitment signatory is named only as an authorised signatory.
As found in this document
As at Fri 9 Oct 2026- Date signed17 Jul 2023Source: the AI read of this record
- Date start17 Jul 2023Source: the AI read of this record
- Processing basisBG-Demo processes personal data only to provide the Services and only on the Controller's documented instructionsSource: the AI read of this record
- Breach noticewithout undue delay after becoming aware of a personal data breachSource: the AI read of this record
- International transfersnot outside the United Kingdom unless the transfer is covered by a lawful transfer mechanism and the Controller has been informedSource: the AI read of this record
- Auditon reasonable notice and during business hours, without unreasonable disruptionSource: the AI read of this record
- Return and deletionat the Controller's choice, return or delete personal data it holds on the Controller's behalfSource: the AI read of this record
Body
Data Processing Agreement
Status: Executed
Between: Sprotbrough Recruitment, Doncaster (the "Controller") and BG-Demo, London (the "Processor").
Effective date: 17 Jul 2023
This agreement sits alongside the master agreement and the order form between the parties and governs how BG-Demo handles personal data when providing B-Viz to Sprotbrough Recruitment.
Background
Sprotbrough Recruitment recruits for warehouse, driving and engineering roles in South Yorkshire. B-Viz is built and run inside the Controller's own Snowflake account, and connects the Controller's business systems into one queryable layer. In doing so, BG-Demo may process personal data on the Controller's behalf, including candidate, client contact and staff information held in those systems.
Definitions
Terms such as "personal data", "processing", "data subject" and "personal data breach" have the meanings given in UK data protection law. "Services" means B-Viz and the related implementation and support described in the order form.
Roles and scope
Read the whole document (4,413 characters)
- The Controller determines the purposes and means of processing. BG-Demo acts only as Processor.
- BG-Demo processes personal data only to provide the Services and only on the Controller's documented instructions, including this agreement and the order form.
- If BG-Demo believes an instruction breaches data protection law, it will tell the Controller promptly.
Categories of data and data subjects
| Item | Description |
|---|---|
| Data subjects | Candidates, client contacts, and the Controller's own staff |
| Types of data | Contact details, role and employment information, communications records and activity data held in connected systems |
| Special category data | None is intended to be processed; the Controller will not connect sources holding it without agreeing safeguards first |
| Duration | The term of the order form, plus the return or deletion period below |
Processor obligations
- Confidentiality. Everyone at BG-Demo with access to personal data is bound by a duty of confidence.
- Security. BG-Demo applies appropriate technical and organisational measures. Because B-Viz runs inside the Controller's Snowflake account, the data stays under the Controller's own access controls, and BG-Demo works only with the access the Controller grants.
- Assistance. BG-Demo will help the Controller respond to data subject requests and meet its security, breach notification and impact assessment duties, taking account of the nature of the processing.
- Breach notice. BG-Demo will tell the Controller without undue delay after becoming aware of a personal data breach affecting the Controller's data, with the information it then has.
Sub-processors
The Controller gives general authorisation for BG-Demo to use sub-processors needed to deliver the Services. BG-Demo will bind each one to equivalent data protection terms, remains responsible for their performance, and will give the Controller notice of any change so that it can object on reasonable grounds.
International transfers
BG-Demo will not transfer the Controller's personal data outside the United Kingdom unless the transfer is covered by a lawful transfer mechanism and the Controller has been informed.
Audit
BG-Demo will make available the information reasonably needed to show compliance with this agreement and will allow audits by the Controller or its appointed auditor, on reasonable notice and during business hours, without unreasonable disruption.
Return and deletion
On ending of the Services, BG-Demo will, at the Controller's choice, return or delete personal data it holds on the Controller's behalf, unless the law requires it to be kept. Data held in the Controller's Snowflake account remains under the Controller's control throughout.
Liability and general terms
Liability under this agreement follows the limits in the master agreement. If this agreement conflicts with the master agreement on the processing of personal data, this agreement prevails. It is governed by the law of England and Wales.
Signatures
Signed on behalf of the parties on 17 Jul 2023.
| Sprotbrough Recruitment | BG-Demo | |
|---|---|---|
| Signed | Authorised signatory | Nell Ashcombe |
| Title | Authorised signatory for the Controller | Chief Executive Officer and Co-founder |
| Date | 17 Jul 2023 | 17 Jul 2023 |