Data Processing Agreement

In short

• RolesClause 2You are the controller of the personal data in your network data. Frabs is the processor and uses it only as this agreement sets out.
• Your instructions onlyClause 3.1Frabs processes it only on your documented instructions: the terms, this agreement and how you use the service.
• Breaches within 48 hoursClause 8.1Frabs tells you about a personal data breach without undue delay, and within 48 hours.
• Sub-processorsClause 6At least 30 days' notice before one is added or replaced, and you can object on reasonable grounds.
• WhereClause 10Processed in the UK and the European Economic Area, on servers in Amsterdam.
• AuditsClause 11You can audit once in any 12 months, with 30 days' written notice, at your own cost.
• Export and deletionClause 12Export your records for 30 days after the agreement ends. Frabs deletes the data within a further 30 days.

This summary helps you find your way around. The PDF is the full legal text and is what applies.

What's inside

1. 1This DPA and its definitions
2. 2Roles and scope
3. 3Instructions and customer responsibilities
4. 4Personnel
5. 5Security
6. 6Sub-processors
7. 7Data subject rights
8. 8Personal data breaches
9. 9Assistance
10. 10International transfers
11. 11Audit and information
12. 12Return and deletion
13. 13Liability
14. 14Term, changes and governing law
15. Annex 1Details of the processing
16. Annex 2Security measures
17. Annex 3Sub-processors

Version history

Frabs gives at least 30 days' notice before a new version takes effect.