Data Processing Agreement (DPA)
Last updated:
Overview
This Data Processing Agreement applies where Ellexor processes personal data on behalf of a client (the controller) as part of our services, in line with Article 28 UK GDPR.
Our obligations as processor
- Process personal data only on documented instructions
- Ensure staff are bound by confidentiality
- Implement appropriate technical and organisational security measures
- Use sub-processors only with authorisation and equivalent safeguards
- Assist with data subject requests and DPIAs
- Delete or return data at the end of the services
- Make available information needed to demonstrate compliance
Security measures
Measures include encryption, access controls, multi-factor authentication, backups and vulnerability management.
Breach notification
We will notify you without undue delay after becoming aware of a personal data breach.
To request a signed copy of our DPA, please contact us.