Unlimited data terms
Clear controller and processor responsibilities.
The signed agreement and Data Processing Schedule contain the binding Article 28 terms used when Unlimited handles client material.
The two roles
Matt is controller for his own business records. The client is normally controller, and Matt processor, for personal information supplied solely for funding work.
Processor duties
Matt follows documented instructions, protects confidentiality, limits access, uses authorised subprocessors and assists with rights, incidents and agreed deletion.
Client duties
Clients need a lawful basis, suitable privacy information, proportionate material and lawful instructions.
End of service
Clients receive an export period before ordinary live working information is returned or deleted under the retention rule, unless law requires a limited record.