Data processing agreement

This agreement is between the company using QuikPitch (“the Customer”) and QuikLabs Ltd, trading as QuikPitch (“QuikPitch”). QuikLabs Ltd is registered in England and Wales (company number 17562636), with its registered office at 19 Orchard Street, Bristol, BS23 1RG, United Kingdom. It applies whenever QuikPitch handles personal data on the Customer’s behalf: mainly the applications, videos and messages the Customer receives from candidates, and the details of the Customer’s own team members.

For that data the Customer is the controller and QuikPitch is the processor. For candidates’ own profiles and accounts, and for how QuikPitch itself runs, QuikPitch is a controller in its own right: see the privacy notice.

• Subject matter and purpose: providing the QuikPitch hiring service to the Customer.
• Duration: for as long as the Customer uses QuikPitch, then until the data is deleted (see “Return and deletion”).
• Types of personal data: names, contact details the candidate has chosen to share, videos (face and voice), written answers, CV-derived details, job history, messages, and notes and ratings made by the Customer’s team.
• People: candidates and applicants; the Customer’s team members.

• Process the data only on the Customer’s documented instructions (the Customer’s use of QuikPitch is its instruction), unless the law requires otherwise.
• Make sure people who handle the data are bound by confidentiality.
• Keep the data secure with appropriate technical and organisational measures: see Security.
• Help the Customer respond to requests from people exercising their data protection rights, and with data protection impact assessments, where the Customer asks.
• Tell the Customer without undue delay after becoming aware of a personal data breach affecting its data, with the information the Customer needs to meet its own duties.
• Tell the Customer if it thinks an instruction would break data protection law.

The Customer gives general permission for QuikPitch to use the providers listed at Sub-processors, under written terms that give the same protection as this agreement. QuikPitch will tell the Customer in good time before adding or replacing one, and the Customer may object on reasonable data protection grounds in that time.

Where data goes to a provider outside the UK, QuikPitch uses a lawful safeguard: an adequacy decision (including the UK–US data bridge for certified providers), or the UK International Data Transfer Addendum.

The Customer can delete applications, jobs and recorded videos at any time. Recorded videos are also deleted automatically after the period set by the Customer’s plan once a job closes. If the Customer’s subscription ends, its jobs and applications are deleted after a reasonable period. On request QuikPitch will return or delete remaining Customer data when the service ends, unless the law requires it to be kept.

QuikPitch will give the Customer the information it reasonably needs to check that this agreement is being followed, and will allow reasonable audits on reasonable notice.

This agreement forms part of the terms of service and is subject to the liability terms there.

Questions about this agreement: hello@quikpitch.co.