TrainOS

Data Processing Agreement

Plain-language summary — full executable version on request.

This DPA applies when a company customer of TrainOS provides us with personal data of its staff (for example when signing up multiple recruiters on one workspace) and we process that data on the customer's behalf. For directory usage where the customer only views trainer profiles, TrainOS is the controller and the Privacy Notice governs.

1. Roles

The customer is the controller. TrainOS is the processor. Trainers who list on the directory are separate controllers of their own profile data.

2. Subject-matter and duration

Processing is limited to what is needed to operate the customer's TrainOS workspace, for the duration of the pass plus any statutory retention period.

3. Nature and purpose

Hosting, authenticating and displaying company account data and usage events; enabling directory search; providing audit logs.

4. Types of personal data and categories of data subjects

Business contact details (name, work email) of the customer's authorised users. No special-category data.

5. Obligations of TrainOS

  • Process personal data only on documented instructions from the customer.
  • Ensure people authorised to process the data are bound by confidentiality.
  • Implement appropriate technical and organisational measures (see /security).
  • Only engage subprocessors listed at /privacy/subprocessors, giving prior notice of changes.
  • Assist the customer with data-subject requests, DPIAs and breach notifications.
  • Notify the customer without undue delay after becoming aware of a personal-data breach affecting the customer's data.
  • Delete or return personal data at the end of the engagement.
  • Make available all information necessary to demonstrate compliance and allow reasonable audits.

6. International transfers

Where personal data is transferred outside the EEA/UK/KSA, TrainOS relies on the appropriate transfer mechanism (SCCs, UK IDTA/Addendum, PDPL equivalent).

7. Signed copy

To sign this DPA, email hello@thetrainos.com with your legal entity name and address.