Data Processing Agreement
Son güncelleme 2026-10-27
This Data Processing Agreement ("DPA") applies where SAMJAKE LOGISTICS LTD ("Processor") processes personal data on behalf of a customer ("Controller") in providing the platform. It forms part of the subscription agreement. This is a template; the executed version accompanies the customer contract. Change of 21 October 2026: for customers outside the United States, the Processor is now SAMJAKE LOGISTICS LTD.
Subject and duration
Nucra processes personal data solely to provide the platform for the duration of the subscription and for the limited period afterwards needed for return or deletion.
Categories of data and data subjects
Typically: • data subjects — the Controller’s staff and drivers, counterparty contacts, recipients and other individuals named in requests and documents; • data categories — identification and contact details, role, vehicle and driver data, location/GPS data, transport documents and request communications.
Controller instructions
Nucra processes personal data only on the Controller’s documented instructions, including the configuration of the platform, unless required otherwise by UK law or by EU or Member State law (in which case Nucra informs the Controller unless legally prohibited).
Confidentiality
Persons authorised to process the data are bound by confidentiality.
Security
Nucra applies appropriate technical and organisational measures, including encryption in transit, access controls and tenant isolation. See the Security & Data Retention summary.
Subprocessors
The Controller authorises the subprocessors on the Subprocessor List. Nucra imposes equivalent data-protection obligations on each subprocessor and remains responsible for their performance, and gives notice of intended changes so the Controller may object.
International transfers
The platform is hosted in the European Union; the Processor is established in the United Kingdom, and some providers are outside the EEA/UK (including in the United States). Any transfer of EU/EEA or UK personal data to a third country is made under an adequacy decision or adequacy regulations (including the EU–US Data Privacy Framework and its UK Extension where applicable) or the EU Standard Contractual Clauses / UK IDTA, with appropriate safeguards.
Assistance
Taking account of the nature of processing, Nucra assists the Controller with data-subject requests and with security, breach-notification and impact-assessment obligations, and notifies the Controller without undue delay after becoming aware of a personal-data breach.
Deletion or return
On termination, Nucra deletes or returns the personal data at the Controller’s choice, and deletes existing copies unless retention is required by law. Customers can export their data during the subscription.
Audit
Nucra makes available the information needed to demonstrate compliance and allows for and contributes to reasonable audits.