Processing of Customer Personal Data 3.1 UKG will:
3.1.1 comply with all applicable Data Protection Laws in the Processing of Customer Personal Data; and
3.1.2 not Process Customer Personal Data other than for the purpose, and in accordance with, the relevant Customer’s instructions as documented in the Agreement and this DPA, unless Processing is required by the Data Protection Laws to which the relevant UKG Processor is subject, in which case UKG to the extent permitted by the Data Protection Laws, will inform Customer of that legal requirement before the Processing of that Customer Personal Data.
3.2 Customer hereby:
3.2.1 instructs UKG (and authorizes UKG to instruct each Subprocessor) to: (a) Process Customer Personal Data; and (b) in particular, transfer Customer Personal Data to any country or territory subject to the provisions of this DPA, in each case as reasonably necessary for the provision of the Services and consistent with the Agreement.
3.2.2 warrants and represents that it is and will at all relevant times remain duly and effectively authorized to give the instructions set out in Section 3.2.1 on behalf of each relevant Customer Affiliate; and
3.2.3 warrants and represents that it has all necessary rights in relation to the Customer Personal Data and/or has collected all necessary consents from Data Subjects to Process Customer Personal Data to the extent required by Applicable Law.
3.3 Schedule 1 to this DPA sets out certain information regarding UKG’s Processing of Customer Personal Data as required by Article 28(3) of the GDPR (and equivalent requirements of other Data Protection Laws).
Access to Personal Information by Subcontractors Supplier agrees to require any subcontractors or agents to which it discloses Personal Information under this Agreement or under any SOW to provide reasonable assurance, evidenced by written contract, that they will comply with the same or substantially similar confidentiality, privacy and security obligations with respect to such Personal Information as apply to Supplier under this Agreement or any SOW. Supplier shall confirm in writing to DXC that such contract is in place as a condition to DXC’s approval of use of a subcontractor in connection with any SOW. Upon request of DXC, Supplier will provide to DXC a copy of the subcontract or an extract of the relevant clauses. Supplier shall ensure that any failure on the part of any subcontractor or agent to comply with the Supplier obligations under this Agreement or any SOW shall be grounds to promptly terminate such subcontractor or agent. If during the term of this Agreement or any SOW, DXC determines, in its exclusive discretion, that any Supplier subcontractor or agent cannot comply with the Supplier obligations under this Agreement or with any SOW, then DXC may terminate this Agreement in whole or in part (with respect to any SOW for which such subcontractor or agent is providing services), if not cured by Supplier within the time prescribed in the notice of such deficiency.
Provision of Services by Third Parties The Administrator shall, to the extent it determines that it would be advisable in connection with or incidental to the activities contemplated hereby, arrange for and coordinate the services of other professionals, experts and consultants to provide any or all of the Services, in which case, the costs and expenses of such third parties for providing such services shall be borne by the Administrator other than as set forth in Section 3; it being understood that the Administrator shall not charge to the Issuer any fees in addition thereto with respect to such outsourced Painting-Level Services that are described in Section 1(a)(i) and Entity-Level Services described in Section 1(a)(ii), but the Administrator shall be entitled to reimbursement for third party costs incurred in connection with Non-Routine Services described in Section 1(a)(iii) as set forth in Section 3(b). Reimbursement for Non-Routine Services shall be reimbursed by the Issuer out of the proceeds from a sale of the Painting. In addition, Masterworks may determine to sell the Painting without engaging a third-party intermediary, in which event, the Administrator would charge the buyer of the Painting a reasonable fee not to exceed the lowest published buyer’s premium charged by Sotheby’s, Christie’s or Pxxxxxxx in effect at such time.
Protection of Customer Data The Supplier shall not delete or remove any proprietary notices contained within or relating to the Customer Data. The Supplier shall not store, copy, disclose, or use the Customer Data except as necessary for the performance by the Supplier of its obligations under this Call Off Contract or as otherwise Approved by the Customer. To the extent that the Customer Data is held and/or Processed by the Supplier, the Supplier shall supply that Customer Data to the Customer as requested by the Customer and in the format (if any) specified by the Customer in the Call Off Order Form and, in any event, as specified by the Customer from time to time in writing. The Supplier shall take responsibility for preserving the integrity of Customer Data and preventing the corruption or loss of Customer Data. The Supplier shall perform secure back-ups of all Customer Data and shall ensure that up-to-date back-ups are stored off-site at an Approved location in accordance with any BCDR Plan or otherwise. The Supplier shall ensure that such back-ups are available to the Customer (or to such other person as the Customer may direct) at all times upon request and are delivered to the Customer at no less than six (6) Monthly intervals (or such other intervals as may be agreed in writing between the Parties). The Supplier shall ensure that any system on which the Supplier holds any Customer Data, including back-up data, is a secure system that complies with the Security Policy and the Security Management Plan (if any). If at any time the Supplier suspects or has reason to believe that the Customer Data is corrupted, lost or sufficiently degraded in any way for any reason, then the Supplier shall notify the Customer immediately and inform the Customer of the remedial action the Supplier proposes to take. If the Customer Data is corrupted, lost or sufficiently degraded as a result of a Default so as to be unusable, the Supplier may: require the Supplier (at the Supplier's expense) to restore or procure the restoration of Customer Data to the extent and in accordance with the requirements specified in Call Off Schedule 8 (Business Continuity and Disaster Recovery) or as otherwise required by the Customer, and the Supplier shall do so as soon as practicable but not later than five (5) Working Days from the date of receipt of the Customer’s notice; and/or itself restore or procure the restoration of Customer Data, and shall be repaid by the Supplier any reasonable expenses incurred in doing so to the extent and in accordance with the requirements specified in Call Off Schedule 8 (Business Continuity and Disaster Recovery) or as otherwise required by the Customer.
Personal Data Breaches 5.7.1 The Data Processor shall give immediate notice to the Data Controller if a breach occurs, that can lead to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of or access to, personal data transmitted, stored or otherwise processed re the Personal Data processed on behalf of the Data Controller (a “Personal Data Breach”).
5.7.2 The Data Processor shall make reasonable efforts to identify the cause of such a breach and take those steps as they deem necessary to establish the cause, and to prevent such a breach from reoccurring.
Access to Data Operator shall make Data in the possession of the Operator available to the LEA within five (5) business days of a request by the LEA.
TERMINATION OF CARD ACCOUNT 10.1 Your option to terminate
(a) give us notice of termination; and
(b) return to us the card cut in half; and
(c) pay us the total outstanding balance in full (including the amount of any card transaction which you have carried out but which has not been debited to your card account before we receive your card), provided that such termination will only take effect after our receipt of the card and full payment of the total outstanding balance including any Collected Amount, interest, charges and fees due or funds required to be made by Law or Regulation.
10.2 Our right of termination
(a) immediately return to us the card cut in half; and
(b) pay the total outstanding balance in full (including such card transaction which you have carried out but which has not been debited to your card account before we receive your card).
Personal Data Breach 7.1 Processor shall notify Company without undue delay upon Processor becoming aware of a Personal Data Breach affecting Company Personal Data, providing Company with sufficient information to allow the Company to meet any obligations to report or inform Data Subjects of the Personal Data Breach under the Data Protection Laws.
7.2 Processor shall co-operate with the Company and take reasonable commercial steps as are directed by Company to assist in the investigation, mitigation and remediation of each such Personal Data Breach.
Access to Site 3.05.1 Contractor may enter and leave the premises at all reasonable times without charge. Contractor and its employees may use the common areas and roadways of the premises where it is to perform the services together with all facilities, equipment, improvements, and services provided in connection with the premises for common use. This excludes parking for Contractor’s personnel. Contractor shall repair any damage caused by it or its employees as a result of its use of the common areas.
Claims by Third Parties The obligations and liabilities of an indemnifying party under any provision of this Agreement with respect to claims relating to third parties shall be subject to the following terms and conditions:
(a) Whenever any indemnified party shall have received notice that a claim has been asserted or threatened against such indemnified party, which, if valid, would subject the indemnifying party to an indemnity obligation under this Agreement, the indemnified party shall promptly notify the indemnifying party of such claim in the manner described in Paragraph 22; provided, however, that the failure of the indemnified party to give timely notice hereunder shall not relieve the indemnifying party of its indemnification obligations under this Agreement unless, and only to the extent that, such failure caused the damages for which the indemnifying party is obligated to be greater than they would have been had the indemnified party given timely notice.
(b) The indemnifying party or its designee will have the right but not the obligation, to assume the defense of any claim described in Paragraph 6 or 7 above, provided, however, the indemnified party shall have the right at its option to defend and to compromise or settle such claim which compromise or settlement shall be made only with the written consent of the indemnifying party, such consent not be unreasonably withheld. If the indemnifying party fails to assume the defense of such claim within 15 days after receipt of notice of a claim pursuant to Paragraph 22, the indemnified party against which such claim has been asserted will (upon delivering notice to such effect to the indemnifying party) have the right to undertake, at the indemnifying party's cost and expense, the defense, compromise or settlement of such claim on behalf of and for the account and risk of the indemnifying party, subject to the right of the indemnifying party to assume the defense of such claim at any time prior to settlement, compromise or final determination thereof and provided, however, that the indemnified party shall not enter into any such compromise or settlement without the written consent of the indemnifying party. In the event the indemnified party assumes defense of the claim, the indemnified party will keep the indemnifying party reasonably informed of the progress of any such defense, compromise or settlement. The indemnifying party shall not be liable for any settlement of any action effected without its consent, but if settled with the consent of the indemnifying party or if there be a final judgment beyond review or appeal, for the plaintiff in any such action, the indemnifying party agrees to indemnify and hold harmless an indemnified party from and against any loss or liability by reason of such settlement or judgment. Any party who does not undertake the defense of a claim may, at its own expense, retain such additional attorneys and other advisors as it shall deem necessary, which attorneys and advisors will be permitted by the party undertaking such defense, and its attorneys, to observe the defense of such claim.
