Data Controller vs Processor Roles
In the context of the Data Processing Agreement, Edu Vique acts as a Data Processor, while the educational institutions and organizations using its software serve as Data Controllers. This distinction is crucial as it defines the responsibilities and liabilities concerning the handling of personal data.
Personal Data Processed
Edu Vique processes various types of personal data, including but not limited to:
- Student names
- Email addresses
- Contact information
- Academic records
- Enrollment details
Purpose and Legal Basis
The personal data is processed for the following purposes:
- Providing educational resources and services
- Facilitating communication between educators and students
- Conducting assessments and evaluations
The legal basis for processing this data includes the necessity for the performance of a contract and compliance with legal obligations as mandated by applicable data protection laws.
Sub-processors
Edu Vique may engage sub-processors to assist in processing personal data. All sub-processors are carefully selected and are subject to the same data protection obligations as outlined in the Data Processing Agreement. Edu Vique maintains a list of approved sub-processors, which is available to Data Controllers upon request.
Data Subject Rights
Data subjects have various rights under applicable data protection laws, including:
- The right to access their personal data
- The right to rectify inaccurate data
- The right to erase personal data
- The right to restrict processing
- The right to data portability
Edu Vique will assist Data Controllers in fulfilling these rights in accordance with legal requirements.
Data Transfer Safeguards
In the event that personal data is transferred outside of the original jurisdiction, Edu Vique ensures that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or other legal mechanisms to ensure compliance with data protection regulations and to protect the rights of data subjects.