Data Processing Agreement
Zuletzt aktualisiert 2026-07-24
This Data Processing Agreement ("DPA") applies where SAMJAKE LOGISTICS (UK) LIMITED ("Nucra", "Processor") processes personal data on behalf of a customer ("Controller") in providing the platform. It forms part of the subscription agreement. This is a template; the executed version accompanies the customer contract.
Subject and duration
Nucra processes personal data solely to provide the platform for the duration of the subscription and for the limited period afterwards needed for return or deletion.
Categories of data and data subjects
Typically: • data subjects — the Controller’s staff and drivers, counterparty contacts, recipients and other individuals named in requests and documents; • data categories — identification and contact details, role, vehicle and driver data, location/GPS data, transport documents and request communications.
Controller instructions
Nucra processes personal data only on the Controller’s documented instructions, including the configuration of the platform, unless required otherwise by EU or Member State law (in which case Nucra informs the Controller unless legally prohibited).
Confidentiality
Persons authorised to process the data are bound by confidentiality.
Security
Nucra applies appropriate technical and organisational measures, including encryption in transit, access controls and tenant isolation. See the Security & Data Retention summary.
Subprocessors
The Controller authorises the subprocessors on the Subprocessor List. Nucra imposes equivalent data-protection obligations on each subprocessor and remains responsible for their performance, and gives notice of intended changes so the Controller may object.
International transfers
Any transfer outside the United Kingdom is made under UK adequacy regulations or the UK IDTA / UK Addendum to the EU Standard Contractual Clauses, with appropriate safeguards.
Assistance
Taking account of the nature of processing, Nucra assists the Controller with data-subject requests and with security, breach-notification and impact-assessment obligations, and notifies the Controller without undue delay after becoming aware of a personal-data breach.
Deletion or return
On termination, Nucra deletes or returns the personal data at the Controller’s choice, and deletes existing copies unless retention is required by law. Customers can export their data during the subscription.
Audit
Nucra makes available the information needed to demonstrate compliance and allows for and contributes to reasonable audits.