Data Processing Addendum

Scope & roles

This Data Processing Addendum is a general, non-binding description of how Trela processes personal data on behalf of its customers. In this context the customer generally acts as the data controller, determining the purposes and means of processing, and Trela acts as a data processor, processing data only on the customer’s documented instructions.

The definitive terms that apply to a customer are those set out in a separately executed addendum forming part of the master agreement.

Processing details

The subject matter of processing is the provision of the Trela workforce operations platform. Processing typically covers workforce identity, attendance, scheduling, payroll and compliance data, for the duration of the customer’s use of the service and for the purposes of delivering and supporting it.

Sub-processors

Trela may engage sub-processors, such as cloud hosting and communications providers, to help deliver the service. Sub-processors are subject to written obligations that offer a comparable level of protection to those described here. We aim to maintain an up-to-date list and to provide notice of material changes.

Security measures

Trela maintains technical and organisational measures designed to protect personal data, including encryption in transit and at rest, role-based access controls, monitoring and audit logging. These measures are reviewed periodically as the platform evolves.

Data-subject requests

Where a data subject exercises their rights, Trela will, taking into account the nature of the processing, assist the customer with appropriate measures to respond. Requests received directly by Trela will be referred to the relevant customer as controller.

International transfers

Where personal data is transferred across borders, Trela intends to rely on appropriate safeguards and lawful transfer mechanisms as required by applicable data-protection law, and to apply protections consistent with those described in this addendum.

Term & deletion

This addendum applies for as long as Trela processes personal data on the customer’s behalf. On termination, and subject to any legal retention requirements, Trela will delete or return personal data in accordance with the customer’s instructions and our data retention practices.