Legal

Data processing agreement

The processing terms that apply where OncoSync handles personal and clinical data on your organisation's behalf.

Draft — not yet legally reviewed. The structure below is in place, but each section still needs its final wording from counsel before this page is published.

Roles of the parties

Your organisation is the controller of patient data. OncoSync acts as processor, acting only on your documented instructions.

Final wording for this section is pending legal review.

Subject matter and duration

Final wording for this section is pending legal review.

Categories of data and data subjects

Final wording for this section is pending legal review.

Processor obligations

Final wording for this section is pending legal review.

Technical and organisational measures

Measures are set out in the security schedule and reviewed annually.

Final wording for this section is pending legal review.

Sub-processors

Final wording for this section is pending legal review.

International transfers

Final wording for this section is pending legal review.

Personal data breach notification

We notify you without undue delay after becoming aware of a breach.

Final wording for this section is pending legal review.

Assistance with data subject requests

Final wording for this section is pending legal review.

Audit and inspection

Final wording for this section is pending legal review.

Return and deletion of data

Final wording for this section is pending legal review.