Data Processing Agreement | First Person Marketing

1.Subject matter and duration
Processing is carried out for the term of the services and for the limited period afterwards required for deletion or return of data.
2.Nature and purpose
Marketing delivery, campaign measurement, customer communication and reporting, using categories of data and data subjects described in the service schedule.
3.Processor obligations
We process only on documented instructions, ensure personnel are bound by confidentiality, implement appropriate technical and organisational measures, and assist with data subject requests and impact assessments.
4.Sub-processors
We maintain a list of sub-processors, impose equivalent obligations on them by contract, and give notice before adding or replacing one so you may object on reasonable grounds.
5.International transfers
Transfers outside the originating jurisdiction rely on standard contractual clauses or another recognised mechanism, with supplementary measures where required.
6.Security incidents
We notify you without undue delay after becoming aware of a personal data breach and provide the information you reasonably need to meet your own obligations.
7.Deletion and audit
On termination we delete or return personal data at your choice, and we make available the information necessary to demonstrate compliance, including audit support on reasonable notice.

Questions about this document can be sent to legal@firstpersonmarketing.com and are answered within two business days. Contact us.

Terms for processing personal data on your behalf