Data Sharing Agreement

These Kaampus terms and conditions (Agreement) is a legal agreement between you (you or your) and GradTouch Limited (we, us or our). You are in a positon of authority for a university society (Society), and you are entering into this Agreement in relation to you sharing personal data (being name and contact information) (Member Data) with us in respect of the members of your university society (each being a Member). We will use the Member Data to share offers with Members, where those offers have been sponsored by third parties that we work with.

You agree to share the Member Data with us, and we agree to use the Member Data, on terms set out in this Agreement.

By accepting these terms you agree to the terms of this Agreement which will bind you.

If you do not agree to the terms of this Agreement, do not accept this Agreement. If you do not accept then your society member’s will not be able to access the sponsored offers we make available to kaampus.com users.

Purpose

1.1 You have collected and process the Member Data as a data controller. You have received consent from the relevant Members, or rely on another lawful basis, to share the Member Data with us, as contemplated herein.

1.2 Your sharing of the Member Data with us is necessary so as to allow Members to access the sponsored offers we make available to the members of university societies that subscribe to the kaampus.com platform (Platform). This is for the benefit of the Society and the Members, to better allow Members to engage with the sponsors of the offers we make available to them, with the intention of increasing those Members’ exposure to our graduate engagement platforms.

1.3 We will process the Member Data in order to:
(a) contact Members with sponsored offers;
(b) provide Members with information about an automatic and basic account created for them within our wider services, that they can activate (or leave dormant) at their discretion; and
(c) to allow those Members, that have an existing account to access our wider services, to choose to merge their automatic and basic account created through the Platform with their existing account for our wider services.
We will not process Member Data under this Agreement in a way that is incompatible with the purposes described above (Agreed Purpose).

1.4 We each act as a data controller in processing the Member Data under this Agreement. Any personal data which is collected and/or processed by us independently shall not be governed by the terms of this Agreement.

1.5 Each party will make a copy of this Agreement available to Members on request.

Our commitments

2.1 We will comply with applicable data protection legislation at all times during the term of this Agreement.

2.2 We will provide all Members with a link to our Privacy Policy when we communicate with them, to inform them of the purposes for which we will process their Member Data, the legal basis for such purposes and such other information as is required by relevant data protection legislation.

2.3 We will not transfer Member Data to any third party for marketing purposes without the relevant Member’s consent. We will simply share third-party offers with the Members, giving them the option of taking up the offers directly with the third-party sponsors of those offers.

2.4 Our Privacy Policy sets out how we use the Member Data and any third parties we share it with.

2.5 We will ensure that we have effective procedures in place to allow the Member to "opt-out" from having their Member Data used for the Agreed Purpose, and to allow you to remove Members from the recipient list for the offers we circulate if you choose to do so.

2.6 We will keep the Member Data for no longer than is necessary in order process the Member Data for the Agreed Purpose or as required in order to comply with our legal and professional obligations.

Member Data

3.1 The following types of Personal Data will be shared by you with us during this Agreement:
(a) Member name
(b) Member email address
(c) The fact that a Member is a member of the Society

3.2 You will share Special Categories of Personal Data with us in the event that the Society, in its nature, relates to a particular type of person that strongly indicates the nature of that person’s Special Categories of Personal Data. This may be:
(a) Racial or ethnic origin
(b) Political opinions
(c) Religious or philosophical beliefs
(d) Genetic or biometric data used to uniquely identify a natural person
(e) Data concerning a natural person's physical or mental health or condition, sex life or sexual orientation
If that is the case, we will get explicit consent from you, and each Member, before processing the Member Data for the Agreed Purpose.

Your commitments

(a) You have ensured, and will continue to ensure, that Member Data is not irrelevant or excessive with regard to the Agreed Purposes.
(b) You will follow our instructions to allow us to access the Member Data.
(c) You must ensure that the appropriate level of consent has been obtained from the relevant Members to allow the Member Data to be shared with us and used for the Agreed Purpose, in compliance with the relevant data protection legislation.
(d) You must ensure that, where the nature of the Society means that we are likely to know Special Categories of Personal Data about Members before they activate their account with us, you have obtained each Member’s explicit consent to share this information with us.
(e) You must ensure that you have provided clear and sufficient information to Members, in accordance with relevant data protection legislation, of the purposes for which you will process their Member Data and share it with us, the legal basis for such purposes and such other information as is required, including without limitation that the Member Data will be transferred to us, along with information about why it has been shared with us, and a link to our Privacy Policy.
(f) You must ensure that Members are aware that we will give them the opportunity to activate the basic automatic account that we create for them through kaampus.com, that they can link that basic automatic account with an existing account if they have one with us to use our wider services, and that we will match the information you give to us about them with our existing databases to give them this option.
(g) You must ensure that the Member Data is accurate before we are given access to it.
(h) You confirm that you are entitled to provide the Member Data to us.
(i) You will comply with applicable data protection legislation at all times during the term of this Agreement.
(j) You will provide us with any Member access or other data request which relates to the Agreed Purpose, within five working days from receipt, so that we may comply with our obligations under the applicable data protection legislation.

Governing law and jurisdiction

5.1 This Agreement and any dispute or claim (including without limitation non-contractual disputes or claims) arising out of or in connection with it or its subject matter or formation shall be governed by and construed in accordance with the law of England.

5.2 Each party irrevocably agrees that the courts of England shall have exclusive jurisdiction to settle any dispute or claim, arising out of or in connection with this Agreement or its subject matter or formation.