Data processing agreement

This agreement applies whenever Camponia processes personal data on behalf of a school (the data fiduciary) as part of the service.

Our commitments as processor

• We process school data only on the school’s instructions and only to provide the service.
• Our staff can access a school’s data only to provide support or to fix a fault, and every such access is logged.
• We protect the data with appropriate technical and organisational measures, described on our security page.
• We keep the data in India and use sub-processors only under written contracts with equivalent obligations. We tell schools before adding one.
• We tell the school without undue delay if we become aware of a personal data breach affecting its data, and help it meet its obligations to the Data Protection Board and to the people affected.
• We help the school respond to requests from parents, students and staff exercising their rights.

At the end

When the subscription ends, the school can export its data. After the retention period we delete it, except records we must keep by law (such as invoices), and confirm the deletion in writing.