Data Processing Addendum (DPA)

This Data Processing Addendum ("DPA") forms part of the Terms of Service between ASISTEACH ("Processor") and the school, organization, or individual tutor using ASISTEACH ("Controller") wherever the Controller enters Personal Data about students, staff, or other individuals it is responsible for.

1. Subject Matter and Duration

ASISTEACH processes Personal Data on behalf of the Controller for as long as the Controller maintains an active ASISTEACH account, in order to provide lesson generation, scheduling, homework, billing, and related school-management features.

2. Nature and Purpose of Processing

Personal Data is processed solely to provide the ASISTEACH platform: generating AI-powered lesson and homework content, managing student and teacher records, scheduling, and billing.

3. Categories of Data and Data Subjects

• Data subjects: students (including minors), teachers, school staff, and parents/guardians where applicable
• Categories of data: name, contact details, language level, learning notes, attendance, payment records, and any other information the Controller chooses to enter

4. Processor Obligations

ASISTEACH shall:

• Process Personal Data only on the Controller's documented instructions
• Ensure personnel with access to Personal Data are bound by confidentiality
• Implement appropriate technical and organizational security measures, including encryption in transit (HTTPS/TLS), encrypted database backups, and role-based access control
• Assist the Controller in responding to data subject rights requests (access, correction, deletion, portability)
• Notify the Controller without undue delay after becoming aware of a Personal Data breach affecting their data
• Delete or return all Personal Data at the end of the relationship, within 30 days, except where retention is required by law

5. Sub-processors

The Controller authorizes ASISTEACH to engage the sub-processors listed in our Privacy Policy (Section 5). ASISTEACH will notify the Controller at least 30 days in advance of adding a new sub-processor that will process the Controller's data, and the Controller may object on reasonable data-protection grounds.

6. International Transfers

Where a sub-processor is located outside the EU/EEA, ASISTEACH ensures an appropriate transfer mechanism is in place, such as the European Commission's Standard Contractual Clauses.

7. Audit Rights

Upon reasonable request, ASISTEACH will provide the Controller with information necessary to demonstrate compliance with this DPA, including relevant security documentation.

8. Liability

Each party's liability under this DPA is subject to the limitations of liability set out in the Terms of Service.

Contact

Questions about this DPA can be sent to hello@asisteach.eu.