Data Sharing Agreement
Introduction
This Data Sharing Agreement governs how CAUSE+SELECT ("we", "our", "us") handles and shares data between charities, gaming studios, content creators, and other platform participants (each a "Party" and together the "Parties").
1. Purpose of data sharing
The Parties agree that data shared under this Agreement is limited to information necessary for partnership facilitation between charities, game studios and content creators. CAUSE+SELECT does not act as a fundraising platform and does not process donor data or financial transactions. Each Party remains independently responsible for compliance with applicable fundraising and financial regulations.
2. Responsibilities of the Parties
Each party acts as an independent data controller in respect of personal data it submits to the platform and processes in connection with its own activities. CAUSE+SELECT acts as an independent data controller for the operation, security, analytics, and administration of the platform. No Party acts as a joint controller or processor for another Party, unless expressly stated. As independent controllers, the Parties acknowledge that:
- • Each Party is responsible for ensuring its own compliance with applicable data protection laws.
- • Each Party will provide appropriate transparency information to data subjects.
- • Each Party will handle data subject rights requests related to its own processing.
- • The Parties shall implement appropriate technical and organisational measures to protect the shared data.
- • Any processing of personal data, or any data sharing between the Parties that occurs outside the scope of the platform, is carried out independently by each Party and is not governed by this agreement.
3. Nature and categories of data
The personal data that may be shared between the Parties includes:
With charities
When you express interest in a campaign, we provide the relevant charity with your: • Organisation name and contact details • Profile information • Message and capacity information
With gaming studios and content creators (“gaming partners”)
Charities may share campaign participation data with their gaming partners to facilitate collaborations.
4. Lawful basis for sharing
The following lawful bases apply to the processing of personal data on the platform:
- • Contractual necessity: to create and manage user accounts and to enable connections between Parties under this Data Sharing Agreement.
- • Legitimate interest: to maintain the security of the platform, prevent misuse, and perform essential analytics to ensure its proper functioning.
- • Consent: where applicable, for optional features such as marketing or non-essential analytics.
- Each Party is responsible for ensuring it has a valid lawful basis and for meeting its controller obligations for any subsequent processing outside the platform.
5. Data Security
Each Party shall:
- • Use appropriate safeguards (e.g. encryption, access controls) during data transmission and storage.
- • Notify the other Party without undue delay of any data breach affecting the shared data.
- • Cooperate in investigating and mitigating any such breach, where applicable.
6. Data retention and deletion
Each Party will retain the shared data only as long as necessary for the defined purpose and in accordance with its own retention policies. Upon expiry of the retention period, the data shall be securely deleted or anonymised.
7. Data transfers
If personal data is transferred outside the EEA/UK, each Party is responsible for ensuring appropriate safeguards are in place in accordance with Chapter V of the UK GDPR (such as, but not limited to, International Data Transfer Agreement, International Data Transfer Addendum, Standard Contractual Clauses, adequacy decision).
8. Audit and Cooperation
- The Parties agree to cooperate reasonably in response to:
- • Data protection authority requests or investigations.
- • Data subject complaints or requests involving the shared data.
- No right to audit is granted unless required by law or regulatory authority.
9. Amendments
Any amendment to this Agreement must be in writing and signed by the involved Parties.
10. Governing Law and Jurisdiction
This Agreement shall be governed by English law and subject to the exclusive jurisdiction of the courts of England.
11. Termination
Either Party may terminate this agreement without cause at any time by notice or by closing the User’s account. In the event that CAUSE+SELECT so terminates this agreement, we will provide five working days’ notice by email.
Effect of Termination
- • The User’s access to the Platform ends immediately.
- • CAUSE+SELECT will deactivate the account and delete or anonymise relevant Personal Data in line with its retention policies.
- • Parties remain responsible as independent controllers for any personal data they hold or have received outside the platform.
Termination of this Agreement shall not affect any rights, obligations, or liabilities that have accrued prior to the termination date, including any ongoing obligations relating to data retention, deletion, or confidentiality.
Contact
For any further questions you may have about this Data Sharing Agreement, please contact us at <a href="mailto:contact@wectrlimpact.com">contact@wectrlimpact.com</a>