Who it is for
When your business uses the TraceID Hub, whether for Verified, Traced or both, you decide what data goes in and why. That makes you the controller and TraceID Ltd your processor. The Data Processing Agreement (DPA) sets out how we handle that data on your behalf.
What it covers
- The roles of each party: you as controller, TraceID Ltd as processor.
- That we process your data only on your documented instructions.
- The sub-processors we use, and how changes to that list are handled.
- The security measures we apply, by reference to our security page.
- How and when we tell you about a personal data breach.
- How we help you respond when people exercise their data protection rights.
- Returning or deleting your data at the end of the contract, as you instruct.
- Both the UK GDPR and the EU GDPR.
Sub-processors
The current list of sub-processors, and what each one does, is on our security page.
How to ask for it
Email [email protected] with your company name, and we will send you the DPA to review and sign.