Data Processing Agreement.
How RocketDevs processes personal data on your instructions when we source talent for you. For negotiated engagements, the signed agreement's Exhibit C governs; this page mirrors it in plain language.
1. Roles
For the talent-sourcing services, the client is the data controller and RocketDevs is the data processor. RocketDevs processes personal data only to deliver the services described in the agreement.
2. Data subjects
The personal data we process on your behalf relates to candidates, Talent, and client representatives.
3. Categories of data
Identification and contact details, CV and work history, education and skills, role and compensation preferences, interview notes and suitability assessments, and client representatives' business contact details. Where the client elects productivity monitoring, this also includes monitoring data (periodic screenshots and activity metrics).
4. Our obligations as processor
- Documented instructions. We process personal data only on your documented instructions, including for international transfers, unless law requires otherwise.
- Confidentiality. Everyone we authorize to process the data is bound by confidentiality.
- Security. We apply appropriate technical and organizational measures to protect the data.
- Data subject requests. We assist you in responding to data subject rights requests.
- Breach notification. We notify you of a personal data breach without undue delay.
- Delete or return. At the end of the services, we delete or return the personal data, at your choice.
- Audits. We make available the information needed to demonstrate compliance and allow for audits.
5. Sub-processors
We may engage sub-processors, and we impose data-protection obligations on them equivalent to ours. The current list is available on our Sub-processors page and on request. We notify you of changes to the list, and you have the right to object.
6. International transfers
Transfers outside the EU and UK rely on GDPR Chapter V safeguards: an adequacy decision where one applies, and otherwise the EU Standard Contractual Clauses, supplemented by the UK International Data Transfer Addendum for transfers subject to UK GDPR.
7. Precedence
For clients on a signed Sourced Talent Matching Agreement, Exhibit C of that agreement is the governing Data Processing Agreement and controls over this page. For all other clients, this page is our Data Processing Agreement with you: it is incorporated into and forms part of the Terms of Service. Questions: contact support@mail.rocketdevs.com.