This agreement outlines the terms and conditions for the SelectScience and the Client’s sharing of Personal Data. It is a legally binding agreement between the two parties. **Key Points:**

* **Data Controllers:** SelectScience and the Client are both responsible for the processing of Personal Data.

This document outlines the data sharing arrangements for criminal offence data. It details the definition of criminal offence data, the Data Sharing Code, and the process for sharing this data. **Detailed Text:**

The document focuses on the sharing of data related to criminal offences and convictions.

This document outlines the legal framework governing data protection in the European Union (EU). It is a comprehensive and enforceable regulation that has been in effect since May 25, 2018.

The Annex outlines the principles and procedures for the transfer of personal data between parties to the Annex. It establishes a framework for the transfer of personal data between organizations, including the responsibilities of the parties involved. The Annex also defines the specific requirements for the transfer of personal data, including the purpose, legal basis, and data subject rights.

SelectScience will leverage its existing audience and marketing channels to reach potential customers. **Detailed Explanation:**

SelectScience is a platform that connects researchers and scientists with products and services relevant to their work. They have a large and engaged audience of researchers, scientists, and academics. This audience is highly receptive to new products and services that can enhance their research and productivity.

A. Data Security and Privacy: The Foundation of Our Practices
B.

This document outlines the terms and conditions for processing personal data. It emphasizes the importance of data security and privacy. The document outlines the responsibilities of the parties involved in the processing of personal data. It also specifies the conditions under which personal data can be processed.

4. Shared Personal Data 4.1 The types of Personal Data to be shared between the parties during the Term of this Annex are: First name, last name, business name, business location, business email address, job title, job function, primary scientific discipline, areas of professional interest 4.2 No Special Categories of Personal Data or Criminal Offence Data will or may be shared between the parties. 4.3 The Shared Personal Data must not be irrelevant or excessive with regard to the Agreed Purposes. 5. Lawful, fair and transparent processing 5.1 Each party shall ensure that it Processes the Shared Personal Data fairly and lawfully in accordance with clause 5.2 during the Term of this Annex.

The summary provided outlines the legal framework for processing shared personal data. It emphasizes the importance of lawful grounds for processing and the requirement for proof of consent. **Detailed Text:**

The principle of lawful processing forms the bedrock of data protection.

– Expanded on specific points to provide more detail and context. – Added examples to illustrate key concepts. ## Sharing Personal Data: Transparency and Data Protection

When sharing Personal Data with third parties, it’s crucial that Data Controllers and Data Receivers understand and adhere to data protection laws. This includes providing adequate transparency and clear explanations to individuals about how their data will be handled. **1.

* **Natural flow:** It uses a more natural flow of ideas. The summary provides a succinct overview of the data subject’s rights regarding the transfer of their personal data. Let’s break down these rights further:

**1. Right to Information about Data Transfers:**
* **Purpose:** This right ensures transparency and empowers data subjects to understand why their data is being shared. * **Content:** The information should be clear, concise, and easily understandable.

7. Data retention and deletion 7.1 The Data Receiver shall not retain or process Shared Personal Data for longer than is necessary to carry out the Agreed Purpose. 7.2 Notwithstanding clauses 7.1 and 7.3, the parties shall continue to retain Shared Personal Data in accordance with any statutory or professional retention periods applicable in their respective countries and / or industry or as set out in its data retention policies. 7.3 The Data Receiver shall ensure that any Shared Personal Data is returned to the Data Discloser or destroyed the following circumstances: (a) on termination or expiry of the Terms; or

The processing of personal data is a complex and multifaceted process that requires careful consideration and adherence to legal and ethical principles.

This clause highlights the importance of data security and responsibility in the context of data processing. Let’s break down this clause and analyze its implications for different stakeholders:

**Data Receiver:** This refers to any organization or individual that receives the data from the Data Discloser. The Data Receiver is responsible for ensuring that the data is processed lawfully, securely, and in accordance with the relevant data protection laws.

9. Security and training 9.1 The parties undertake to have in place throughout the Term of this Annex appropriate technical and organisational security measures to: (a) prevent: (i) unauthorised or unlawful processing of the Shared Personal Data; and (ii) the accidental loss or destruction of, or damage to, the Shared Personal Data (b) ensure a level of security appropriate to: (i) the harm that might result from such unauthorised or unlawful processing or accidental loss, destruction or damage; and (ii) the nature of the Shared Personal Data to be protected. 9.2 The level of technical and organisational measures agreed by the parties as appropriate as at the Commencement Date having regard to the state of technological development is set out in Schedule 1. The parties shall keep such security measures under review and shall carry out such updates as they agree are appropriate throughout the Term of this Annex.

The summary provided outlines the key aspects of employee training for handling Shared Personal Data. Let’s delve deeper into each point:

**Duty of Training:**

The summary emphasizes that parties involved in handling Shared Personal Data have a legal obligation to ensure their employees are adequately trained. This duty stems from the inherent risks associated with processing personal data and the need to protect individuals’ privacy.

**Detailed Analysis:**

This section outlines the crucial responsibilities of both parties in the event of a Personal Data Breach. It emphasizes the importance of prompt reporting, transparency, and collaborative action. **Prompt Reporting:**

The agreement mandates both parties to report any Personal Data Breach to the relevant data protection authority, including, if applicable, the data subjects themselves.

* **”They agree to participate in any non-binding mediation process the Data Subject or Supervisory Authority might initiate”**. This is rephrased to **”they agree to participate in any non-binding mediation process the Data Subject or Supervisory Authority might initiate.”**. This makes the sentence more concise and easier to understand. These changes are made to improve the clarity and readability of the text.

1 The Data Discloser shall make available to the Data Processor a detailed description of the processing operations and the risks associated with them. The Data Processor shall be required to implement appropriate technical and organizational measures to address the risks. The Data Discloser shall be responsible for ensuring the confidentiality of the personal data and the integrity of the processing operations.

This detailed and comprehensive text expands on the key points of the summary, providing a more in-depth understanding of the Data Receiver’s obligations. **Detailed Explanation:**

The Data Receiver, in this context, is a party that receives and handles Shared Personal Data. This data is subject to the UK Data Protection Legislation, which outlines the legal framework for processing personal information.

This section of the contract outlines the limitations of liability and disclaimers of warranties. It emphasizes that the parties are not responsible for any damages or losses arising from the use of the product or service. This section is crucial for protecting the parties from potential legal disputes and ensuring a clear understanding of the terms and conditions.

Access rights shall be granted and revoked based on the need-to-know principle.