Data Processing
How ServiceSetu processes data on behalf of institutions.
Template text for this deployment. Have it reviewed by legal counsel before production launch.
Roles
For applications received, the institution determines how it uses candidate data. ServiceSetu processes that data on the institution's behalf to host, display, export and communicate about applications.
Our commitments
- Process data only on documented instructions and to provide the service.
- Ensure staff with access are bound by confidentiality.
- Apply appropriate technical and organisational security measures, including private storage, signed file links, role-based access controls and audit logging.
- Use sub-processors (hosting, storage, email) under written agreements with equivalent protections.
- Assist with data subject requests and notify the institution without undue delay of a personal data breach affecting its data.
- Delete or return data at the end of the service, subject to legal retention obligations.
A signed data processing agreement is available to institutions on request: info@servicesetu.org.