Data Protection
Processors
| Organisation we share personal data with | Purpose of data sharing | Is the organisation outside of the EEA? | Are we a controller or processor? | Is Organisation X (Column A) a controller or processor? | Country personal data is transferred to / from | Personal data transferred | Special category personal data | Does adequacy apply? | Agreement in place? | Responsible person(s) | Date of last review |
| Trussell | franchise agreement | No | Controller | Processor | UK | Yes | Yes | N/A | DSA | Trustees | 2025-06-19 |
| DCS (Bitzesty) | help people who use the food bank | No | Controller | Processor | UK | Yes | Yes | N/A | Trussell sub-licence | Project Manager | 2025-06-19 |
| Assemble | volunteer management | No | Controller | Processor | UK | Yes | Yes | N/A | Trussell sub-licence | Project Manager | 2025-06-19 |
| Google Workspace | Office suite – document storage, collaboration, backup, etc | Yes | Controller | Processor | UK to USA | Yes | Yes | Yes (Partial) | Trussell sub-licence | DPO | 2025-08-19 |
| Named refferal agency (e.g. CAP) | Refer people in crisis who need emergency food | No | Controller | Processor | UK | Yes | No | N/A – explicit consent | DSA | Project Manager | 2025-06-19 |
| Gateshead Citizens Advice | Financial Inclusion | No | Controller | Processor | UK | Yes | Yes | N/A – explicit consent | Yes | Project Manager | 2025-06-19 |