Prime Global Data Processing Agreement
Effective Date: 2026-07-23
Last Updated: 2026-07-23
Version: 0.1 (Draft)
1. Parties And Applicability
This Data Processing Agreement (DPA) applies when Prime Global processes personal data on behalf of a customer acting as data controller in connection with Prime Global services.
2. Subject Matter And Duration
Processing covers recruitment and related business support operations for the contract term, including limited post-termination handling required for deletion, return, legal compliance, and audit support.
3. Nature And Purpose Of Processing
Processing activities may include collection, storage, organization, retrieval, analysis, transfer, and deletion of candidate, employer, and platform usage data to deliver contracted services.
4. Categories Of Data Subjects
Data subjects may include candidates, employer representatives, platform administrators, and support contacts.
5. Types Of Personal Data
Personal data may include identification data, contact data, professional history, application records, communication metadata, and security logs.
6. Processor Obligations
Prime Global will:
- Process data only on documented controller instructions.
- Ensure personnel confidentiality commitments.
- Implement appropriate security measures.
- Assist with data subject rights where legally required.
- Notify controller of personal data breaches without undue delay.
7. Subprocessors
Prime Global may use approved subprocessors for hosting, storage, communications, analytics, and security operations, subject to contractual controls and due diligence.
8. International Transfers
[LEGAL REVIEW REQUIRED]
Cross-border transfers, when necessary, are governed by lawful transfer mechanisms, such as contractual safeguards and supplementary controls aligned with applicable legal standards.
9. Security Measures
Prime Global maintains risk-based security controls, including access management, encryption practices where feasible, logging, monitoring, and incident response procedures.
10. Audit And Information Rights
[LEGAL REVIEW REQUIRED]
Controller audit rights, frequency, confidentiality conditions, and cost allocation should be defined in contract schedules to balance assurance and operational security.
11. Deletion And Return
Upon termination and subject to legal obligations, Prime Global will delete or return personal data in accordance with documented customer instructions and technical feasibility constraints.
12. Liability
[LEGAL REVIEW REQUIRED]
Liability allocation under this DPA follows the governing commercial agreement, except where non-waivable statutory obligations apply.
13. Contact
Data protection operations:
privacy@primeglobal.tn
Contract matters: legal@primeglobal.tn