Professional Member GDPR NDA
AGREEMENT
This is an Agreement between:
“Rand Companies”, including William L. Rand Company, Inc., The International Center for Reiki Training, Vision Publications and other related entities, and
“Professional Member.”
Introduction
Professional Member performs certain Services in cooperation with the Rand Companies, including Reiki instruction, coursework and certificate distribution (“Services”). During the performance of these Services, Professional Member may be exposed to Confidential Information. This Agreement is intended to prevent the unauthorized disclosure of confidential information, including but not limited to Personal Data of third parties.
Definitions
“Confidential Information” is proprietary information relating to the Rand Companies’ business including but not limited to business and financial records, intellectual property, third party Personal Data or any other information that, if disclosed, could affect the business of the Rand Companies.
“Personal Data” means any information relating to an identified or identifiable natural person, that is, one who can be recognized, directly or indirectly by reference to an identifier such as a name, an number, location, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
“Processing” means any operation or set of operations performed on Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
“Data Protection Officer” or “DPO” refers to the Rand Companies’ Data Protection Officer who can be contacted at DPO@reiki.org.
Terms
1. Non-Disclosure of Confidential Information. Without prior written consent from the Rand Companies, Professional Member will not: (a) disclose Confidential Information to any third party; (b) make or permit to be made copies or other reproductions of Confidential Information; or (c) make any commercial use of Confidential Information. The Professional Member will carefully restrict access to Confidential Information to those of its officers, directors, and employees who are subject to non-disclosure restrictions at least as protective as those set forth in this Agreement and who clearly need such access to participate on Professional Member’s behalf to perform Professional Member services. This obligation continues after the performance of the contracted services.
2. Professional Member’s Obligations Regarding Processing Personal Data.
(a) Comply with the ICRT Privacy Policy
(b) When collecting Personal Data of third parties for Processing by, for or to, the Rand Companies, Professional Member will
(i) provide such third parties, with a copy of the ICRT Privacy Policy,
(ii) obtain documented opt-in consent to the Privacy Policy, and
(iii) provide such documentation to the Rand Companies, upon request.
(c) In the event of a data breach, immediately notify the DPO, and cooperate with the DPO to investigate and remediate the data breach.
(d) Comply with requests from the DPO to access, restrict, delete, rectify, or export Personal Data, consistent with the Privacy Policy.
(d) Upon request from the DPO or a supervisory authority, provide records and other information to demonstrate compliance with the Privacy Policy.