Effective Date: [Insert Date]
This Data Processing Agreement ("DPA") forms part of the agreement between UB Ltd. ("UB ", "we", "us", or "our"), headquartered in London, United Kingdom, and any user or customer ("Controller" or "Customer") of UB services, where UB processes personal data on behalf of the Customer under applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and EU GDPR where applicable.
UB acts as the Processor with respect to personal data processed in the provision of its services.
The Customer remains the Controller and is responsible for ensuring that data subjects are informed of their rights and the data processing activities.
This DPA governs the processing of personal data as necessary to provide services to the Customer for the duration of the service agreement.
The processing will involve data hosting, collaboration tools (e.g., email, chat, file sharing), support services, and related functionalities, as described in the primary service agreement.
Employees, customers, contractors, users, and other data subjects as determined by the Customer.
UB may engage third-party Sub-processors to provide its services. UB shall:
UB implements appropriate technical and organizational measures including:
UB shall assist the Controller in responding to requests from data subjects to exercise their rights under applicable laws, including access, rectification, erasure, restriction, portability, and objection.
In the event of a personal data breach, UB shall notify the Controller without undue delay and provide relevant information for the Controller to meet any reporting or notification obligations.
UB may transfer personal data outside the UK or EEA in compliance with applicable data protection laws, using appropriate safeguards such as Standard Contractual Clauses (SCCs).
UB shall make available all information necessary to demonstrate compliance with this DPA and allow for audits by the Controller or an authorized third-party auditor, provided reasonable notice is given.
Upon termination of services, UB shall, at the Controller’s choice, return all personal data or delete it unless otherwise required by law to retain it.
This DPA shall be governed by the laws of England and Wales.
UB Ltd.
[Insert Registered Address]
London, United Kingdom
Email: [Insert Contact Email]