What it says
What this says
As at Fri 9 Oct 2026Executed data processing agreement dated 22 Apr 2024 between Eccup Software (Controller) and BG-Demo (Processor), part of the Master Services Agreement signed the same day. It states no availability, P1 response time or price.
What it is: a data processing agreement that forms part of the Master Services Agreement signed on the same day. It covers personal data handled while implementing, running and supporting B-Viz.
Commits: BG-Demo processes personal data only on documented instructions and tells Eccup Software "without undue delay" after becoming aware of a breach. It needs prior written authorisation for any sub-processor.
Unusual: nothing off the standard terms. Because B-Viz runs in the customer's Snowflake account, the Controller keeps its data at the end and BG-Demo deletes any copies held outside that account.
Not settled: the Eccup signatory is only "authorised signatory", so the person is not named. No notice period, audit frequency, region or breach deadline in hours is stated, and liability limits sit in the Master Services Agreement, which is not in this document.
As found in this document
As at Fri 9 Oct 2026- Date signed22 Apr 2024Source: the AI read of this record
- Processing instructionsprocess personal data only on the Controller's instructions, unless the law requires otherwiseSource: the AI read of this record
- Breach notificationwithout undue delay after becoming aware of a personal data breach affecting the Controller's dataSource: the AI read of this record
- Sub-processorsnot engage a sub-processor for the Controller's personal data without the Controller's prior written authorisationSource: the AI read of this record
- Location of datawill not move it to another region or country without the Controller's written agreementSource: the AI read of this record
- Return and deletiondelete any copies it holds outside that account and confirm this in writing if askedSource: the AI read of this record
Body
Eccup Software - Data Processing Agreement (signed)
Status: Executed. Version 1.
This Data Processing Agreement is made on 22 Apr 2024 between Eccup Software, based in Leeds ("the Controller"), and BG-Demo, based in London ("the Processor"). It forms part of the Master Services Agreement between the parties signed on the same day.
Purpose and scope
The Processor provides B-Viz to the Controller. B-Viz is built and run inside the Controller's own Snowflake account, so the Controller's data stays in an environment the Controller owns and administers. This agreement covers the personal data the Processor handles while implementing, running and supporting that service.
Roles
The Controller decides why and how personal data is processed. The Processor processes personal data only on the Controller's documented instructions, which are the Master Services Agreement, this agreement and any written instruction given through the agreed support channels.
Description of processing
Read the whole document (3,895 characters)
| Item | Detail |
|---|---|
| Subject matter | Provision of B-Viz to the Controller |
| Duration | The term of the Master Services Agreement, and any period needed to return or delete data |
| Nature | Indexing, storing, searching and presenting data from the systems the Controller connects |
| Categories of data subject | The Controller's staff, and contacts at the providers and other organisations it serves |
| Types of personal data | Business contact details, ticket and renewal records, and product usage data |
The parties do not expect special category data to be processed. If the Controller intends to include it, it will tell the Processor in writing first.
Processor obligations
The Processor will:
- process personal data only on the Controller's instructions, unless the law requires otherwise, and tell the Controller if it believes an instruction breaches data protection law;
- make sure that everyone with access to personal data is bound by a duty of confidentiality;
- keep appropriate technical and organisational security measures in place;
- help the Controller to respond to requests from data subjects, and with its own legal duties on security, impact assessments and breach reporting;
- tell the Controller without undue delay after becoming aware of a personal data breach affecting the Controller's data.
Sub-processors
The Processor will not engage a sub-processor for the Controller's personal data without the Controller's prior written authorisation. Where one is engaged, the Processor will bind it to obligations no less protective than these, and remains responsible for its performance.
Location of data
The Controller's data is held in its Snowflake account in the region the Controller has chosen. The Processor will not move it to another region or country without the Controller's written agreement.
Audit
The Processor will give the Controller the information reasonably needed to show compliance with this agreement, and will allow audits by the Controller or its appointed auditor on reasonable notice, during business hours and without unreasonable disruption.
Return and deletion
When the Master Services Agreement ends, the Processor will stop processing the Controller's personal data. Because the data sits in the Controller's own Snowflake account, the Controller keeps it. The Processor will delete any copies it holds outside that account and confirm this in writing if asked.
Liability and law
Liability under this agreement is subject to the limits in the Master Services Agreement. This agreement is governed by the law of England and Wales.
Signatures
Signed for BG-Demo (Processor)
Name: Tom Ashdown Title: Account Executive Date: 22 Apr 2024
Signed for Eccup Software (Controller)
Name: authorised signatory Title: Director, on behalf of Eccup Software Date: 22 Apr 2024