Data Protection Particulars. The subject matter and duration of the Processing The parties will Process Personal Data in the context of: [●] [describe the relevant services and describe how long the personal data will be processed for- will this be determined by time period or for as long as the purpose continues? Consider longevity of the contract and if the personal data will need to be retained post termination of the contract.]
Data Protection Particulars. The subject matter and duration of the Processing Student registration information, their names and other identifying information such as email addresses The nature and purpose of the Processing Data shared for the purpose of underpinning the educational experience of the students. The type of Personal Data being Processed Personal and Sensitive Personal information The categories of Data Subjects Students registered and enrolled on St George’s programmes of study. Data Retention/Deletion Period and Process Up to six years after the Term pursuant to the St George’s record retention policy Locations (including the geographic region) in which the Personal Data may be Processed by the Supplier and/or any Sub-Processor At the processor’s place of business or wherever their servers are located. APPENDIX 2
Data Protection Particulars. The subject matter, Purpose and duration of the Processing Subject matter and Purposes of Processing (both Parties have obligations under ss20-22 Education Act 1994); 1. Managing Union membership, administration including managing the democratic process of electing Union representatives; 2. Managing membership of sports clubs and societies (legitimate interests of the Parties); 3. Managing members’ volunteering opportunities (legitimate interest of the Parties).
Data Protection Particulars. The subject matter and duration of the Processing As described in the Agreement and the Approved Application The nature and purpose of the Processing As described in the Agreement and the Approved Application The categories of Data Subjects The individuals who have agreed to participate in the China Kadoorie Biobank study. The type of Personal Data being Processed The Participant Level Data to be processed concern the following categories of personal data: · CSIDs – the encoded and unique pseudonymised study identifiers, which are specific to the Research; and · data derived from questionnaire responses and interviews which do not contain special category data, such as birthplace, early life and education, employment history, marital status and number of children. Special categories of data The Participant Level Data to be processed concern the following special categories of data: The CKB resource contains health, biometric data, and other special category data. All special categories of data contained in the Materials is de-identified (the direct and indirect identifiers are removed). The types of special category of data may include: · measures of the Participant’s phenotype, such as height, weight and blood pressure. · biomarkers created by assay of the Participant’s samples, which include common biomarkers (such as cholesterol), infectious disease markers, proteomic and metabolomic markers; · data derived from health record linkages including hospital records, death and disease registries or any other sources of clinical data; and · other special category data derived from baseline and resurvey questionnaire responses and interviews, such as past illness / disease history, dietary, cognitive and physical measures. Relevant Transfer Details CONTACT DETAILS OF PARTIES Data exporter (Oxford): Contact person’s name, position and contact details: [this should be the contact person for data queries for the Approved Research] Data importer (the Data User): Contact person’s name, position and contact details: [this should be the contact person for data queries for the Approved Research]
Data Protection Particulars. The subject matter and duration of the Processing The parties will Process Personal Data in the context of: All relevant data relating to course delivery for the term of the Agreement The nature and purpose of the Processing The Processing will be for the purposes of: Enabling students to be registered, taught and conferred an Award of the University The type of Personal Data being Processed Special Category Personal Data includes information about an individual’s • Race; • Ethnic origin; • Political opinions; • Religion; • Philosophical beliefs; • Trade Union membership; • Genetic data; • Biometrics; • Health; • Sex life; or • Sexual orientation. The personal data may include, but is not limited to: Please tick the boxes that apply and complete Personal Data – List the type of data below Name Date of birth Address Nationality Next of kin Record of student’s enrolment and changes of status Record of student’s results to produce certification and to confirm results after graduation Staff contact details and other staff information relevant to the delivery and award Other information the parties are required to hold as part of their statutory reporting duties. Special Category Personal Data – List the type of data below Ethnicity Disability Personal staff data required to create an IT account that enables access to Kingston University teaching and learning resources. This will include: Name Date of Birth E-mail address The categories of Data Subjects The categories of data subjects may include, but are not limited to: Please tick the boxes that apply and complete Students Staff ☐ Other – Give more information below Data Retention/Deletion Period and Process Duration of the Agreement plus 6 years Locations (including the geographic region) in which the Personal Data may be Processed by the Associate and/or any Sub-Processor UK Schedule 5d Data Protection (University as Controller and Associate as Processor - International transfers outside the EEA) Definitions In this Schedule the following definitions shall apply:
Data Protection Particulars. The subject matter and duration of the Processing [Insert a summary of the types of data (not just Personal Data) that will be processed as part of the Project and its duration of processing. This is required for GDPR compliance.] The nature and purpose of the Processing [Insert a summary of the nature and purpose of that processing. This is required for GDPR compliance.] The type of Personal Data being Processed [Insert a summary of the types/categories of Personal Data that will be processing (e.g. categories such as name, address, mobile phone number)] The categories of Data Subjects [Insert the types of individuals who will be the subject of processing by your consortium (e.g. clients, users)] ANNEX 3 COLLABORATION AGREEMENT OVERVIEW This document sets out:
Data Protection Particulars. The subject matter and duration of the Processing The subject matter of the Processing is Personal Data for which the Company is the Controller and which is processed by Xxxxx and the Research Partner in connection with the provision of the Services. The duration of the Processing is the term of the Project Period. The nature and purpose of the Processing The nature and purpose of the Processing is the handling of the Company's employee data as part of the Services being provided by the Company under this Agreement. The type of Personal Data being Processed The type of Personal Data being or which may be Processed is the names, job titles and anonymised equality and diversity information of the Company's employees. The categories Subjects of Data The categories of Data Subjects are employees of the Company. EXECUTED as an agreement: SIGNED for and on behalf of University of Keele Name: Position: Signature: SIGNED for and on behalf of the Research Partner Name: Position: Signature: SIGNED for and on behalf of XXXXXXXXXXXXXXXX Name: Position: Signature:
Data Protection Particulars. The subject matter and duration of the processing The parties will process Personal Data in the context of the provision of Digital Learning Services. Personal data will be processed in the context of the provision of this service as outlined in the Description of Services within this Agreement. Personal Data will be retained in accordance with the schedule agreed with the Data Controller the Customer and will be transferred back to the Customer at the end of the contract and deleted from the servers and storage devices used to process or store the data during the provision of the service. The nature and purpose of the processing The processing will be for the purposes of: • Provision of a Digital Learning Application • Submission of assignments • Completion of tests and quizzes • Transmission and storage of grades for assignments, tests and quizzes The type of Personal Data being processed The Personal Data will include: • Names • Email addresses • IP addresses • Username & associated password • Student ID number • Postal Address • Contact Telephone Number • Academic Activity • Video footage of Data Subjects The categories of Data Subjects Customer: The Data Subjects will include: • Students • Lecturers • Tutors • Learning Technologists • IT Staff Service Provider: Staff email addresses and telephone numbers 20 Freedom of Information
Data Protection Particulars. Subject matter of the Processing Duration of the Processing The location of the Processing The nature and purpose of the Processing The type of Personal Data being Processed The categories of Data Subjects – Cybersecurity Requirements – Change Request – Combined Authority Policies This Schedule 12 sets out the Combined Authority Policies that are applicable to the provision of the Services. In accordance with clause 41 (Compliance with Combined Authority Policies), the XxxX Solution Provider shall comply with provisions set out in the Combined Authority’s Policies, unless and to the extent that such provisions are contrary to the XxxX Solution Provider’s obligations under this Agreement. Health and Safety Policy; Information Risk Management Policy; Information Security Policy; Information Security Classification Policy; Document Retention Policy; Social Value Policy; Data Protection Policy; Modern Slavery Policy. Copies of the Policies listed above can be obtained from the Combined Authority upon request. -TUPE
Data Protection Particulars. The College will share the following Personal Data of prospective and enrolled students with RHSU: • Name • College Card number • Date of birth • Sex • College email address • Course (also known as degree programme) • Department • Year of study • Home postcode The College shares this data in accordance with both a legal obligation within the Education Xxx 0000, to which the College is subject, and also the legitimate interests of RHSU in order that they can fulfil their function and in the legitimate interests of the students so they can make use of RHSU’s offering. RHSU will share the following Personal Data of enrolled students with the College: • Name and College card number of all students enrolled as a member in a student group (with the exception of where these groups pertain to special categories of data). RHSU shares this data in accordance with the legitimate interests of the College in order that they can conduct statistical research and analysis of student engagement with Sport. • Name, College card number and number of passport points accumulated of all students who have earned passport points through Students’ Union activities. RHSU shares this data in accordance with the legitimate interests of the College in order that they can administer Passport Points in the legitimate interests of the students in relation to their employability skills record. • Name, College card number and term-time address of any students involved in Accidents or Incidents at any of the Students’ Union venues. RHSU shares this data in accordance with a legal obligation with Health & Safety compliance and in the legitimate interests of the College and the students for welfare purposes.
