What this page is
This page provides public information about Fit2Trade’s approach to controller-processor contracting. It is not the Fit2Trade Data Processing Agreement (“DPA”) and does not amend any customer contract.
A current DPA is available to customers and prospective customers where required. Contact dpo@fit2trade.com to request it.
Controller and processor roles
Where a customer determines why and how personal data about its employees, contractors, learners or other users is processed through Fit2Trade, the customer will generally act as controller and Fit2Trade will generally act as processor. Role allocation is determined by the actual processing activity and applicable law.
Fit2Trade separately acts as controller for its own business processing, such as website enquiries, customer contacts, account administration, security and direct business communications. See our Privacy Policy.
The Data Processing Agreement
Where Article 28 GDPR requires a controller-processor contract, Fit2Trade and the customer enter into appropriate written data-processing terms through the applicable Customer Agreement and/or DPA.
The signed Customer Agreement and DPA take precedence over this informational page.
Subprocessors
Fit2Trade uses third-party providers to support hosting, security, email, eLearning delivery, monitoring and customer support. The current public list is available on our Subprocessors page.
Any contractual process for authorising, objecting to or receiving notice of subprocessor changes is governed by the applicable DPA or Customer Agreement.
International transfers
Where personal data is transferred outside the European Economic Area and GDPR transfer restrictions apply, an appropriate lawful transfer mechanism must be used, such as an adequacy decision or approved contractual safeguards.
Customer-specific transfer information can be requested from dpo@fit2trade.com.
Security and assurance
High-level information about Fit2Trade security, access, infrastructure and assurance practices is available in the Trust Centre. Customers conducting procurement or privacy review can request current supporting documentation through their Fit2Trade contact.
Request the current DPA
Email dpo@fit2trade.com to request the current Fit2Trade Data Processing Agreement or ask a controller-processor question.