Data processing (DPA)

This Data Processing Agreement (DPA) describes how Uranion EMEA Ltd processes personal data on behalf of ProvisorBot customers. It forms part of the agreement between the customer and us, and reflects Article 28 of the GDPR.

Roles of the parties

When we process personal data to provide ProvisorBot, the customer is the controller and Uranion EMEA Ltd is the processor. Each party complies with the data-protection law that applies to it.

Subject matter and duration

We process personal data only to provide the service, for as long as the customer agreement is in force and for any short period needed to return or delete the data afterwards.

Nature and purpose of processing

Order-promising and stock-policy decision support: reading the order, inventory and supply data from the customer's systems, and writing back only what the customer chooses to commit.

Personal data and data subjects

Limited personal data contained in the customer's operational records — for example, contact names and details associated with orders — relating to the customer's staff, customers and business contacts.

Our obligations

We process personal data only on the customer's documented instructions, keep it confidential, ensure that people authorised to process it are bound by confidentiality, and apply appropriate technical and organisational security measures as required by Article 32 of the GDPR.

Sub-processors

We engage sub-processors only under written terms that impose equivalent data-protection obligations. A current list is available on request, and we give the customer notice of any intended change so they can object.

International transfers

Personal data is processed in the European Union (Frankfurt). We do not transfer it outside the EEA except where appropriate safeguards are in place and the customer has agreed.

Assistance, breach notice, deletion and audits

We help the customer respond to data-subject requests and carry out data-protection impact assessments; we notify the customer without undue delay after becoming aware of a personal data breach; we delete or return personal data at the end of the agreement; and we make available the information needed to demonstrate compliance and to allow for audits.

Questions about this document? Email staff@provisor.bot.