Data Processing Addendum (Overview)
This page summarises how getBuckler Solutions handles client personal data during an engagement. It is an overview only — the binding terms are in the Data Processing Addendum signed as part of your services agreement.
Draft — pending review. This document is a working template and has not been reviewed by a qualified adviser. It is not yet in effect. Last updated: [REVIEW] not yet effective.
Roles
For personal data we process on your instructions to deliver services, you are the controller and we are the processor. For our own business contact data, we are the controller (see our Privacy Notice).
What we commit to
Process client personal data only on documented instructions and for the engagement.
Apply appropriate technical and organisational security measures.
Bind our personnel to confidentiality.
Use sub-processors only with your authorisation and under equivalent obligations.
Assist with data subject requests and with breach notification.
Delete or return client personal data at the end of the engagement.
Sub-processors
[REVIEW] Maintain and link a current sub-processor list (hosting, collaboration and any tooling used during engagements).
International transfers
Where an engagement involves transfers across regions, the DPA sets out the transfer mechanism relied on (for example standard contractual clauses). [REVIEW] confirm with counsel.
Requesting the full DPA
Email [email protected] for the current signable Data Processing Addendum and sub-processor list.