LEGAL
Data processing agreement
This data processing agreement (DPA) describes how ABAX processes personal data on behalf of customers who use ABAX Field Operations, in line with Article 28 of the GDPR. It forms part of the agreement between you (the data controller) and ABAX (the data processor).
Roles
When you use ABAX Field Operations to process personal data about your workers, customers and jobs, you act as the data controller and ABAX acts as the data processor. ABAX processes personal data only on your documented instructions, including those you give through the product's settings and features.
Scope of processing
The processing covers the personal data you and your users put into ABAX Field Operations — account and profile details, work orders, forms, time entries, messages, location during active jobs, and attached photos and documents — for the purpose of providing the field-service platform. Processing continues for the duration of your subscription.
Subprocessors
ABAX uses vetted subprocessors to deliver ABAX Field Operations, including EU-region cloud hosting, authentication, messaging and payment providers. We impose data-protection obligations on each subprocessor equivalent to those in this DPA, and we will inform you of any intended changes so you can object.
All hosting of ABAX Field Operations data takes place within the EU/EEA.
Security measures
ABAX maintains appropriate technical and organisational measures to protect personal data, including encryption in transit and at rest, access controls, network isolation, logging and regular backups, in line with Article 32 of the GDPR. Access to customer data is limited to staff who need it to operate and support the service.
International transfers
Where any transfer of personal data outside the EU/EEA is unavoidable, it takes place under an adequacy decision or appropriate safeguards such as the European Commission's standard contractual clauses.
Assisting the controller
Taking into account the nature of the processing, ABAX will help you respond to requests from data subjects and meet your obligations on security, breach notification and data-protection impact assessments. We will notify you without undue delay after becoming aware of a personal-data breach affecting your data.
Return and deletion
On termination, or at your request, ABAX will delete or return the personal data it processes on your behalf and delete existing copies, except where storage is required by law. Deletion requests are completed within 30 days; data may be anonymised beforehand for analytical purposes.
Audits
ABAX will make available the information needed to demonstrate compliance with this DPA and will allow for and contribute to audits, including inspections, conducted by you or an auditor you appoint, subject to reasonable confidentiality and security arrangements.
Data protection contact
For data-protection questions or to exercise your rights, contact the data controller below or email our support team:
ABAX UK Ltd
Allia Business Centre, Peterborough United Football Club, London Road, Peterborough, PE2 8AN, United Kingdom
+44 1733 698 888