Data Processing Agreement
Last updated: 9 July 2025
1. Definitions
- "Controller" means the organisation that determines the purposes and means of processing Personal Data.
- "Processor" means Talent Aisle when processing Personal Data on behalf of the Controller.
- "Personal Data" means any information relating to an identified or identifiable natural person.
2. Scope and Purpose of Processing
This DPA applies where the Client (Controller) shares role, candidate or hiring-manager data with Talent Aisle to deliver recruitment services. Talent Aisle will process Personal Data only for the purpose of providing those services, in accordance with the Client’s instructions.
3. Processing Details
- Categories of Data: Candidate résumés, contact details, interview feedback, hiring-manager notes.
- Data Subjects: Candidates, job applicants, hiring managers and related individuals.
- Duration: For the term of the Services and thereafter as required by applicable law or as requested by the Controller.
4. Obligations of Talent Aisle
- Process Personal Data only on documented instructions from the Controller.
- Ensure that personnel authorised to process Personal Data are subject to confidentiality obligations.
- Implement appropriate technical and organisational measures to protect Personal Data (e.g. encryption, access control, audit logging).
- Assist the Controller with data subject requests and compliance obligations where appropriate.
- Return or securely delete all Personal Data upon request or termination of Services.
5. Sub-Processing
The Client authorises Talent Aisle to engage subprocessors where necessary to deliver the Services. Talent Aisle will ensure equivalent data protection obligations are imposed on any subprocessors.
6. International Transfers
Any transfers of Personal Data outside the UK will be subject to appropriate safeguards, such as Standard Contractual Clauses or other lawful mechanisms.
7. Governing Law
This DPA is governed by the laws of the jurisdiction in which Talent Aisle is registered.