Data Handling Agreement - Wonde

1 DATA PROCESSING AGREEMENTT hisdataprocessingagreementrecordstheterm suponwhichWondeLimited( Wonde )willprocesstheSchoolDataforthepurposeof transferringtheSchoolDatatoWonde sapplicationsand/ortooneormorethirdparty applicationprovidersofservicesorproducts totheSchoolandthisAgreementis therefore formed between Wonde and the , THE SCHOOL this Agreement the following definitions shall apply: Agreement means this Data Processing Agreement . AuthorisedPersons shallmeanthepersonsorcategoriesofpersons thattheSchoolauthorisestogiveWondeproces singinstructions pursuant to this Agreement . ConfidentialInformation meansallconfidentialinformation(howeverr ecordedorpreserved) | 01/2022 | Data hasthemeaninggivenintheDataProtectionLaw sasamended or replaced from time-to-time.

2 Data Controller shallbeinterpretedandconstruedbyreferenc etotheterm Controller as defined under Data Protection Laws. Data Processor shallbeinterpretedandconstruedbyreferenc etotheterm Processor as defined under Data Protection Laws. Data ProtectionLaws meansallapplicabledataprotectionandpriva cylegislationinforcefromtimetotimeintheU KincludingtheDataProtectionAct2018( DPA )(asamendedorreplacedfromtime-to-time),U KGDPR(asdefinedintheDataProtectionAct201 8)andthePrivacyandElectronicCommunicatio nsRegulations2003(SI2003/2426)asamendeda ndallotherlegislationandregulatoryrequir ementsinforcefromtimetotimewhichapplytoa partyrelatingtotheuseofPersonalData(incl uding,withoutlimitation,theprivacyofelec troniccommunications).

3 Andtheguidanceandcodesofpracticeissuedby theInformationCommissionerorotherrelevan tregulatoryauthorityand applicable to a party. Effective Date meansthedateuponwhichtheSchoolacceptsthe seterms. Good IndustryPractice meansusingstandards,practices,methodsand proceduresconformingtothelawandexercisin gthatdegreeofskillandcarediligencepruden ceandforesightwhichwouldreasonablyandord inarilybeexpectedfromaskilledandexperien cedpersonorbodyengagedinasimilartypeofun dertakingunderthe same or similar | 01/2022 | MIS meanstheSchool sdatabasewhichholdstheSchoolData. Personal Data has the meaning given in Data Protection Laws.

4 Personal DataBreach hasthemeaninggiveninDataProtectionLawsbu tshall include any breach of School processed or processing has the meaning given in Data Protection Laws. School meanstheschooloreducationestablishmentus ingthe Wonde Software. School Data meansPersonalDatarelatingtostudents,pare ntsandguardians,andstaffattheSchool,ando therdataregarding the school, including but not limited and contact details; of birth; data; ; records; , call and year group information. School Suppliers meansthirdpartyprovidersofservicesorprod uctsviathirdpartyapplicationstotheSchool towhichtheSchoolwishestotransfercertaind atasetsoftheSchool | 01/2022 | Services Means the services performed by ,utilisingtheWondeSoftware,oftransferrin gselectedSchoolDatafromtheSchooloritsMIS toselectedSchool Suppliers; ,parentsandguardians,andstaffattheSchool toaccessselecteddatafromtheMISand/orScho olSuppliersusingasingleaccountwithinthe Wonde Software; allow access to, and use of the Wonde Software.

5 StandardContractualClauses (SCC) meansallControllertoProcessorSCCs,anyCon trollertoControllerSCCsoranyotherSCCstha tmayapplyandareenteredintobetweenthepart iesortheEuropeanCommission sSCCsforthetransferofPersonalDatapursuan ttotheEuropeanCommission sdecision (C92010)593) of 5 February 2010. Sub-Processors meansanythird-party,personorcompanyappoi ntedbyoronbehalfofWondewhomayprocessPers onalDatatofacilitatetheprovisionoftheSer vicesinconnection with the Agreement . UK GDPR meanstheGeneralDataProtectionRegulation, Regulation(EU)2016/679,asitformspartofdo mesticlawintheUnitedKingdombyvirtueofsec tion3oftheEuropeanUnion(Withdrawal)Act20 18(includingasfurtheramendedormodifiedby thelawsoftheUnitedKingdomorofapartoftheU nitedKingdomfromtimeto time).

6 Wonde Software meansthesoftwareapplicationsandplatforms upplied(directlyorindirectly)byWondeandu sedbytheSchool including the Wonde school | 01/2022 | reference towritingorwrittenincludes emails and writing in anyelectronic Effective Date of this Agreement shall be the date that the SchoolacceptsthetermsofthisAgreementandt heSchoolacknowledgesthatthisAgreementsha llbeeffectiveandreplaceanypreviouslyappl icabledata processing, Handling and security is subject to the Data Protection (someorallof)theSchoolDatatoWondeandtheW onde Software , the School agrees to the terms of this School and Wonde acknowledge that, for the purposes of DataProtection Laws, Wonde is a Data Processor and the School is a DataControllerinrespectoftheSchoolDataco mprisingPersonalDatawhichisprocessed by the Wonde Software.

7 Each party shall comply with theirrespective obligations under the Data Protection ,includingdetailsofstaffoftheSchoolwhent heyinteractwithWondedirectly, scollectionandhandlingofPersonalDataisou tlinedinitsPrivacyNotice,whichismadeavai labletotheSchoolandisfurtheravailable on Wonde s website or by obligations for the processing of the School (unlesssuchprocessingshallberequiredbyan yapplicablelawto which Wonde is subject to).Wo-DPA | 01/2022 | the purpose ,whichpermitsstudents,parentsandguardian s,andstaffoftheSchooltoaccess and manage the School Data effectively; out requests and/or instructionsto restrict or approvedata sets via the Wonde school portal; providing the School with access to the Wonde Software.

8 Otherwise reasonably necessary for theprovision of theServices by Wonde to the Data to Wonde for the purpose of Wonde processing the SchoolDataassetoutinthisclause2,islawful under,andinfullcompliancewith, ,claims,damages,expenses,lossesandliabil itiesincurredbyWondearisingout of or in connection with any breach of the foregoing warranty ,duration, ,theorganisationandre-categorisationofth atSchoolData,thetransferoftheSchoolDatat oSchoolSuppliersnotifiedtoWondebytheScho olviatheWondeschoolportal,theprocessingo fSchoolDatawithinandforthepurposeoftheWo ndeSoftware,andthetransferoftheSchoolDat atoparents,guardians,studentsandstaffoft heSchool who are permitted access to the Wonde Software;Wo-DPA | 01/2022 | to provide the Services.

9 ,andthedatasubjectswillbestudentsoftheSc hool,theirparentsandguardians, and staff of the and ,andshallcontinueinfullforceunlessandunt iltheSchoolremovestheWondeSoftwarefromth eSchool scomputernetworkorMIS,atwhichpointthisAg reementshallautomatically , , ,4and5and9shallcontinue to ,inordertoprotecttheSchoolData,willremai ninfullforce and of School ,forthepurposeofextractingandtransferrin gsuchSchoolData to Wonde and to School (viaHTTPS)theSchoolData will be encrypted by the Wonde ;subjecttoanytermsandconditions of use for the online | 01/2022 | School to the school portal in the Wonde ,inthetermsrequiredbytheDataProtectionLa ws,beforeinstructingWondetotransferanySc hoolDatatosuch School ,theSchoolhassoleresponsibilityforensuri ngthatadequatesafeguardsareinplaceforthe transferofthatSchoolData,asrequiredbyDat aProtectionLaws,toajurisdictionoutsideof theUnitedKingdom(including,ifapplicable, writtenagreementsincorporatingtheappropr iate SCCs).

10 ,andhasreceivedallconsentsandrightsneces saryundertheDataProtectionLawstoenableWo ndetoprocess the School ,theSchoolacknowledgesandagreesthatitwil lbesolelyresponsiblefor(i)theaccuracy,qu ality,andlegalityoftheSchoolDataandtheme ansbywhichithasbeenacquired;(ii)complyin gwithallnecessarytransparencyandlawfulne ssrequirementsundertheDataProtectionLaws forthecollectionanduseoftheSchoolData;(i ii)ensuringtheSchoolhastherighttotransfe rorprovideWondeaccesstotheSchoolDataforp rocessingunderthisAgreement;(iv)ensuring thattheSchool sinstructionstoWondecomplywithapplicable lawsincludingtheDataProtection ,claims,damages,expenses,lossesandliabil itiesincurredbyWondearisingoutoforinconn ection with any breach of the clauses , , and/or School Data shall always remain the property of the | 01/2022 | ,includingbutnotlimitedto,providinganyre quirednoticesandobtaininganyrequiredcons ents, to the extent it is held or processed outside of Wonde s shall of performing the Services it provides to the School.