[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-detail-169222-en":3,"doc-seo-169222-105":30,"detail-sidebar-cat-1-en-105":84},{"code":4,"msg":5,"data":6},0,"success",{"doc_id":7,"user_id":8,"nickname":9,"user_avatar":10,"doc_module":11,"category_id":12,"category_name":13,"doc_title":14,"doc_description":15,"doc_content":16,"file_id":17,"file_url":18,"file_type":19,"file_size":20,"view_count":11,"is_deleted":4,"is_public":11,"is_downloadable":11,"audit_status":11,"page_count":21,"language":22,"language_code":23,"site_id":24,"html_lang":23,"table_of_contents":25,"faqs":26,"seo_title":27,"seo_description":15,"update_tm":28,"read_time":29},169222,1099523882367,"Jordan Avery","https://ap-avatar.wpscdn.com/davatar_9964176cb1d06d4a9deccf72a44ae3dc",1,18,"Letters","ANNEX 13 - DATA SHARING AGREEMENT TEMPLATE","Annex 13 provides a template for a data sharing agreement governing how personal data is shared and safeguarded between two parties while delivering services. It defines key data protection terms under the UK GDPR, clarifies controller and processor roles, and specifies that personal data is used only for the permitted purpose set out in the schedule. It also sets compliance requirements, conflict-of-terms priority, confidentiality, restricted access, records of processing, incident notification timelines, and limits on disclosure and storage devices.","ANNEX 13 – DATA SHARING AGREEMENT TEMPLATE\nTHIS AGREEMENT is made the ……… day of ………………………. 202[3]\nBETWEEN:\n(1)\t[XX] a {company/organisation incorporated in country – client to update as relevant} and having its registered address at {client address} (the “Client”);\nand\n(2)\t[xx] a limited company incorporated in England with registration number XXXXX and XXXXXX and having its registered address at XXXX, XXXX, XXXX (the \"Counterparty\")\neach a \"Party\" and together the \"Parties\".\nRECITALS:\nFor the purpose of providing the Services under the Controller to Controller Agreement {“Name of the Service Agreement”  both Parties may receive personal Data.\nThe Parties have entered into this Agreement (as defined below) to provide for the sharing of Personal Data for the Permitted Purpose (as defined below) and to ensure that there are appropriate provisions and arrangements in place to properly safeguard the information shared between the Parties.\nAs part of the collaborative arrangement to enable the provision of services, the parties have agreed to share Personal Data about potential participants and participants of the Heat Pump Ready Programme, Stream 2: Tools and Technology\nNOW IT IS HEREBY AGREED as follows:\n\u0013  TC \"\u0013 REF _Ref429634846 \\r  \\* MERGEFORMAT \u00141\u0015 DEFINITIONS\" \\l1 \u0015Definitions\nThe following terms shall have the meanings set out below.\n\u0013  TC \"\u0013 REF _Ref432297157 \\r  \\* MERGEFORMAT \u00142\u0015 DATA PROTECTION\" \\l1 \u0015DATA PROTECTION\nFor the purposes of this Agreement, “controller”, “processor”, “data subject”, \"Personal Data\" and \"process\" shall have the meanings set out in the UK GDPR and \"process\" and \"processed\" when used in relation to the processing of Client’s Data, will be construed accordingly, and will include both manual and automatic processing. Any reference to \"Personal Data\" includes a reference to \"special categories of personal data”, as applicable, whereby \" special categories of personal data \" means Client’s Data that incorporates such categories of data as are listed in Article 9(1) of the UK GDPR.\nThe Parties shall each process Personal Data under this Agreement. The Parties acknowledge that the factual arrangement between them dictates the classification of each Party in respect of the Data Protection Legislation. Notwithstanding the foregoing, the Parties anticipate that each Party shall act as a Controller in its own right as further set out in Schedule 1 (Data Processing Particulars.) For the avoidance of doubt, the parties are not joint controllers for the purposes of Article 26 of the UK GDPR.\nIn this sense, the Parties acknowledge and agree that:\n(1)\t Client is acting as a Controller in its own right in relation to the Client Supplied Personal Data that is processed by the Counterparty, in the course of providing market and research services to Client; and\n(2)\t when the Counterparty is collecting survey responses from respondents and/or Personal data in the course of providing the Services to Client, the Counterparty is acting as the Controller in its own right of survey responses and/or the collection of personal data which is not transferred back to the Client unless otherwise agreed with participants’ consent.\nThe Parties acknowledge that Personal Data provided to the Counterparty will only be used for the purposes outlined in Schedule One (Permitted Purpose).\nThe Parties acknowledge that in the event of any conflict between the provisions of this Agreement and other agreements governing the processing of personal data, the provisions herein shall prevail.\nEach of the Parties acknowledges and agrees that Schedule 1 (Data Processing Particulars) is an accurate description of the Data Processing Particulars.\nWhere a Party is acting as a Controller in relation to this Agreement, it shall comply with its obligations under the Data Protection Legislation and that Party shall ensure that it records due notification to any relevant Regulator, such notice to include its use and processing of the Personal Data.\nW","cbCaivy2qFqC6N2B","https://ap.wps.com/l/cbCaivy2qFqC6N2B","docx",50341,16,"English","en",105,"# Definitions\n## Data Protection","[{\"question\":\"What are the security and notification obligations?\",\"answer\":\"The annex requires appropriate operational and technological measures to keep data secure, restrict access to trained employees, and notify the client of any information security incident within 24 hours of discovery.\"}]","ANNEX 13 - DATA SHARING AGREEMENT TEMPLATE | DOCX",1788248629,6,{"code":4,"msg":31,"data":32},"ok",{"site_id":24,"language":23,"slug":33,"title":14,"keywords":34,"description":15,"schema_data":35,"social_meta":79,"head_meta":81,"extra_data":83,"updated_unix":28},"annex-13-data-sharing-agreement-template","",{"@graph":36,"@context":78},[37,54,69],{"@type":38,"itemListElement":39},"BreadcrumbList",[40,44,48,51],{"item":41,"name":42,"@type":43,"position":11},"https://docshare.wps.com","Home","ListItem",{"item":45,"name":46,"@type":43,"position":47},"https://docshare.wps.com/template/","Template",2,{"item":49,"name":13,"@type":43,"position":50},"https://docshare.wps.com/template/letters/",3,{"item":52,"name":14,"@type":43,"position":53},"https://docshare.wps.com/template/annex-13-data-sharing-agreement-template/169222/",4,{"url":52,"name":14,"@type":55,"author":56,"headline":14,"publisher":58,"fileFormat":61,"inLanguage":23,"description":15,"dateModified":62,"datePublished":63,"encodingFormat":61,"isAccessibleForFree":64,"interactionStatistic":65},"DigitalDocument",{"name":9,"@type":57},"Person",{"url":41,"name":59,"@type":60},"DocShare","Organization","application/vnd.openxmlformats-officedocument.wordprocessingml.document","2026-09-05","2026-09-01",true,{"@type":66,"interactionType":67,"userInteractionCount":53},"InteractionCounter",{"@type":68},"ViewAction",{"@type":70,"mainEntity":71},"FAQPage",[72],{"name":73,"@type":74,"acceptedAnswer":75},"What are the security and notification obligations?","Question",{"text":76,"@type":77},"The annex requires appropriate operational and technological measures to keep data secure, restrict access to trained employees, and notify the client of any information security incident within 24 hours of discovery.","Answer","https://schema.org",{"og:url":52,"og:type":80,"og:title":14,"og:site_name":59,"og:description":15},"article",{"robots":82,"canonical":52},"index,follow",{"doc_id":7,"site_id":24},{"code":4,"msg":5,"data":85},[86,91,96,101,106,110,115,118,123],{"id":87,"doc_module":11,"doc_module_name":46,"category_name":88,"show_sort_weight":89,"slug":90},11,"Presentations",90,"presentations",{"id":92,"doc_module":11,"doc_module_name":46,"category_name":93,"show_sort_weight":94,"slug":95},12,"Resumes",80,"resumes",{"id":97,"doc_module":11,"doc_module_name":46,"category_name":98,"show_sort_weight":99,"slug":100},14,"Invoices",70,"invoices",{"id":102,"doc_module":11,"doc_module_name":46,"category_name":103,"show_sort_weight":104,"slug":105},15,"Posters",60,"posters",{"id":21,"doc_module":11,"doc_module_name":46,"category_name":107,"show_sort_weight":108,"slug":109},"Social Media",50,"social-media",{"id":111,"doc_module":11,"doc_module_name":46,"category_name":112,"show_sort_weight":113,"slug":114},17,"Forms",40,"forms",{"id":12,"doc_module":11,"doc_module_name":46,"category_name":13,"show_sort_weight":116,"slug":117},30,"letters",{"id":119,"doc_module":11,"doc_module_name":46,"category_name":120,"show_sort_weight":121,"slug":122},21,"Paper Templates",5,"papers-templates",{"id":124,"doc_module":11,"doc_module_name":46,"category_name":125,"show_sort_weight":4,"slug":126},158,"General","general-158"]