Assistance under Data Protection Legislation Sample Clauses
Assistance under Data Protection Legislation. Where Appspace processes the Customer Personal Data under or in connection with the performance of its obligations under the Agreement, Appspace shall:
2.3.1 implement appropriate technical and organizational measures necessary to meet the requirements of Article 32 of the GDPR;
2.3.2 taking into account the nature of the Processing and the information available to Appspace, reasonably assist Customer to fulfil Customer ’s obligations under Data Protection Legislation:
(i) where possible, to respond to requests from Customers concerning Data Subjects exercising their rights in Customer Personal Data under Data Protection Legislation (e.g., access, rectification, erasure, data portability, etc.). If a request is sent directly to Appspace, Appspace will inform the requester to contact the Customer which is responsible for their Personal Data and will not otherwise respond to the request. In the event Appspace is unable to delete Customer Personal Data for reasons permitted under the Data Protection Legislation, Appspace shall (a) promptly inform Customer of the reason(s) for its inability to fulfill the deletion request, (b) ensure the continued privacy, confidentiality and security of such Customer Personal Data, and (c) delete the Customer Personal Data promptly after the reason(s) for Appspace’s inability to delete such data has expired
(ii) with respect to Articles 32 to 36 of the GDPR. If changes in Data Protection Legislation result in new material obligations as it relates to Appspace’s assistance under this Section 2.3.2, the Parties will work together in good faith to agree upon an acceptable resolution. Each Party shall be responsible for its own costs incurred under this Section 2.3.2; and
2.3.3 make available to Customer all information reasonably requested by Customer for the purpose of demonstrating that Customer’s obligations relating to the appointment of Data Processors as set out in Article 28 of the GDPR have been met.
