Annex A

Details of Data Processing

 

(a) Controller (data exporter): Customer has engaged Supplier to provide the Platform Services under the Agreement.

(b) Processor (data importer): Vocareum, Inc. a Delaware corporation

(c) Subject matter: The subject matter of the data processing under this DPA is the Personal Data.

(d) Duration of processing: Supplier will process Personal Data as outlined in this DPA.

(e) Purpose of processing: Supplier shall only process Personal Data for the Permitted Purposes.

(f) Nature of the processing: Supplier provides an online education platform, as more particularly described in the Agreement.

(g) Categories of data subjects: Customers

(h) Types of Personal Data: Customer may upload, submit or otherwise provide certain personal data to the Service, the extent of which is typically determined and controlled by Customer in its sole discretion, and may include the following types of personal data:

    • Identification and contact data (name, address, email, username); IT information (IP addresses, cookies data). •
    • (i) Sensitive Data: Supplier does not want to, nor does it intentionally, collect or process any Sensitive Data in connection with the provision of the Service.

(j) Processing Operations: Personal Data will be processed in accordance with the Agreement (including this DPA) and may be subject to the following processing activities:

    • Storage and other processing necessary to provide, maintain and improve the Service provided to Customer pursuant to the Agreement; and/or
    • Disclosures in accordance with the Agreement and/or as compelled by applicable law.