LEGAL
Data processing agreement
This data processing agreement (DPA) describes how ABAX processes personal data on behalf of customers who use Field Ops by ABAX, in line with Article 28 of the GDPR. It forms part of the agreement between you (the data controller) and ABAX (the data processor).
Roles
When you use Field Ops by ABAX to process personal data about your workers, customers and jobs, you act as the data controller and ABAX acts as the data processor. ABAX processes personal data only on your documented instructions, including those you give through the product's settings and features.
Scope of processing
The processing covers the personal data you and your users put into Field Ops by ABAX — account and profile details, work orders, forms, time entries, messages, location during active jobs, and attached photos and documents — for the purpose of providing the field-service platform. Processing continues for the duration of your subscription. Where the customer organisation enables it, a technician's location while on the way to a job is shown to that job's end customer as an estimated arrival time and, optionally, an approximate map position.
Subprocessors
ABAX uses vetted subprocessors to deliver Field Ops by ABAX, including EU-region cloud hosting, authentication, messaging and payment providers. We impose data-protection obligations on each subprocessor equivalent to those in this DPA, and we will inform you of any intended changes so you can object.
All hosting of Field Ops by ABAX data takes place within the EU/EEA.
Security measures
ABAX maintains appropriate technical and organisational measures to protect personal data, including encryption in transit and at rest, access controls, network isolation, logging and regular backups, in line with Article 32 of the GDPR. Access to customer data is limited to staff who need it to operate and support the service.
International transfers
Where any transfer of personal data outside the EU/EEA is unavoidable, it takes place under an adequacy decision or appropriate safeguards such as the European Commission's standard contractual clauses.
Assisting the controller
Taking into account the nature of the processing, ABAX will help you respond to requests from data subjects and meet your obligations on security, breach notification and data-protection impact assessments. We will notify you without undue delay after becoming aware of a personal-data breach affecting your data.
Return and deletion
On termination, or at your request, ABAX will delete or return the personal data it processes on your behalf and delete existing copies, except where storage is required by law. Deletion requests are completed within 30 days; data may be anonymised beforehand for analytical purposes.
Audits
ABAX will make available the information needed to demonstrate compliance with this DPA and will allow for and contribute to audits, including inspections, conducted by you or an auditor you appoint, subject to reasonable confidentiality and security arrangements.
Data protection contact
For data-protection questions or to exercise your rights, contact the data controller below or email our support team:
ABAX UK Ltd
Allia Business Centre, Peterborough United Football Club, London Road, Peterborough, PE2 8AN, United Kingdom
+44 1733 698 888