Data Processing Agreement
Our standard Data Processing Agreement (DPA) is available for download below. It covers the obligations of Rightlander as a data processor acting on behalf of customers under UK GDPR and EU GDPR.
Standard DPA
The standard DPA governs the processing of personal data by Rightlander on behalf of its customers. It is incorporated by reference into the main service agreement and does not require a separate signature for customers whose agreements include standard data processing terms.
The DPA covers:
- Subject matter and duration of processing
- Nature and purpose of processing
- Type of personal data and categories of data subjects
- Obligations and rights of the controller
- Processor obligations (security, sub-processors, breach notification, deletion)
- International data transfer mechanisms (UK IDTA, EU SCCs)
Email [email protected] and we will send the executable DPA within one working day.
Need amendments?
If your legal or procurement team requires amendments to the standard DPA, we are happy to review reasonable requests. Please prepare a redlined version of the document and send it to [email protected] with the subject line “DPA amendment request”.
Our legal team aims to respond to DPA queries within five business days. Complex amendments or group-level agreements may take longer, and we will let you know at the earliest opportunity.
For general data protection enquiries or questions about Rightlander’s privacy practices, see the security and privacy page or the privacy policy.