This Data Processing Agreement ("DPA") governs the processing of Personal Data by Laius Entertainment ("Processor") on behalf of the School/District ("Controller").
1. Definitions
- Controller: The School determines the purposes (why) and means (how) of processing.
- Processor: Laius Entertainment processes data on behalf of the Controller.
2. Processing Instructions
The Processor shall process Personal Data only on documented instructions from the Controller, unless required to do so by UK or EU law.
3. Security Measures
The Processor shall implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including encryption and regular testing of security effectiveness.
4. Sub-processors
The Controller authorises the Processor to engage specific sub-processors (e.g., AWS). The Processor shall inform the Controller of any intended changes concerning the addition or replacement of other processors.
5. Data Breach Notification
The Processor shall notify the Controller without undue delay after becoming aware of a personal data breach.
6. Deletion or Return of Data
At the choice of the Controller, the Processor shall delete or return all the personal data to the Controller after the end of the provision of services relating to processing.