Common use of Audit Rights and Locations Clause in Contracts

Audit Rights and Locations. Customer shall have the right to perform audits of ASSA ABLOY’s processing of Personal Data on behalf of Customer (including such processing as may be carried out by ASSA ABLOY’s subcontractors, if any) in order to verify ASSA ABLOY’s, and any subcontractor’s, compliance with this Agreement, such audits to take place in ASSA ABLOY´s facilities. ASSA ABLOY will, during normal business hours and upon reasonable notice (whereby a notice period of twenty (20) business days shall always be deemed reasonable), provide an independent auditor, appointed by Customer and approved by ASSA ABLOY, reasonable access to the parts of facilities where ASSA ABLOY is carrying out processing activities on behalf of Customer, and to the information relating to the processing of Personal Data processed on behalf of Customer under this Agreement. The audit shall be carried out as quickly as possible and it shall not disturb ASSA ABLOY’s normal business operations. The auditor shall comply with ASSA ABLOY’s work rules, security requirements and standards when conducting site visits. Before commencing any audit, the independent auditor (including relevant parties/persons conducting the audit) shall enter into the non-disclosure agreement(s) provided by ASSA ABLOY. Customer is responsible for all costs associated with the audit, save for when the audit concludes a material breach of ASSA ABLOY’s undertakings as set forth in this Clause 5. If so, ASSA ABLOY shall compensate Customer for reasonable and verified costs associated with the audit. All work products generated in the course of an audit shall be ASSA ABLOY´s property. For the avoidance of doubt, the audit rights set forth herein are subject to Customer’s and the independent auditor’s compliance with the restrictions and limitations set forth supra. A Supervisory Authority shall always have direct and unrestricted access to ASSA ABLOY's premises, data processing equipment and documentation in order to investigate that ASSA ABLOY’s processing of Personal Data processed on behalf of Customer is performed in accordance with the Applicable Data Protection Legislation.

Audit Rights and Locations. End Customer shall have the right to perform audits of ASSA ABLOY’s processing of Personal Data on behalf of End Customer (including such processing as may be carried out by ASSA ABLOY’s subcontractorssub-processors, if any) in order to verify ASSA ABLOY’s, and any subcontractorsub- processor’s, compliance with this Agreement, such audits to take place in ASSA ABLOY´s ABLOY’s facilities. ASSA ABLOY will, during normal business hours and upon reasonable notice (whereby a notice period of twenty (20) business days shall always be deemed reasonable), provide an independent auditor, appointed by End Customer and approved by ASSA ABLOY, reasonable access to the parts of facilities where ASSA ABLOY is carrying out processing activities on behalf of End Customer, and to the information relating to the processing of Personal Data processed on behalf of End Customer under this Agreement. The audit shall be carried out as quickly as possible and it shall not disturb ASSA ABLOY’s normal business operations. The auditor shall comply with ASSA ABLOY’s work rules, security requirements and standards when conducting site visits. Before commencing any audit, the independent auditor (including relevant parties/persons conducting the audit) shall enter into the non-disclosure agreement(s) provided by ASSA ABLOY. End Customer is responsible for all costs associated with the audit, save for when the audit concludes a material breach of ASSA ABLOY’s undertakings as set forth in this Clause 5Section 6. If so, ASSA ABLOY shall compensate End Customer for reasonable and verified costs associated with the audit. All work products product generated in the course of an audit shall be ASSA ABLOY´s ABLOY property. For the avoidance of doubt, the audit rights set forth herein are subject to End Customer’s and the independent auditor’s compliance with the restrictions and limitations set forth supra. A Supervisory Authority shall always have direct and unrestricted access to ASSA ABLOY's premises, data processing equipment and documentation in order to investigate that ASSA ABLOY’s processing of Personal Data processed on behalf of End Customer is performed in accordance with the Applicable Data Protection Legislation.

Audit Rights and Locations. End Customer shall have the right to perform audits of ASSA ABLOY’s processing of Personal Data on behalf of End Customer (including such processing as may be carried out by ASSA ABLOY’s subcontractorssub-processors, if any) in order to verify ASSA ABLOY’s, and any subcontractorsub- processor’s, compliance with this Agreement, such audits to take place in ASSA ABLOY´s ABLOY’s facilities. ASSA ABLOY will, during normal business hours and upon reasonable notice (whereby a notice period of twenty (20) business days shall always be deemed reasonable), provide an independent auditor, appointed by End Customer and approved by ASSA ABLOY, reasonable access to the parts of facilities where ASSA ABLOY is carrying out processing activities on behalf of End Customer, and to the information relating to the processing of Personal Data processed on behalf of End Customer under this Agreement. The audit shall be carried out as quickly as possible and it shall not disturb ASSA ABLOY’s normal business operations. The auditor shall comply with ASSA ABLOY’s work rules, security requirements and standards when conducting site visits. Before commencing any audit, the independent auditor (including relevant parties/persons conducting the audit) shall enter into the non-disclosure agreement(s) provided by ASSA ABLOY. End Customer is responsible for all costs associated with the audit, save for when the audit concludes a material breach of ASSA ABLOY’s undertakings as set forth in this Clause 56. If so, ASSA ABLOY shall compensate End Customer for reasonable and verified costs associated with the audit. All work products product generated in the course of an audit shall be ASSA ABLOY´s ABLOY property. For the avoidance of doubt, the audit rights set forth herein are subject to End Customer’s and the independent auditor’s compliance with the restrictions and limitations set forth supra. A Supervisory Authority shall always have direct and unrestricted access to ASSA ABLOY's premises, data processing equipment and documentation in order to investigate that ASSA ABLOY’s processing of Personal Data processed on behalf of End Customer is performed in accordance with the Applicable Data Protection Legislation. Pseudonymization. To the extent permitted under Applicable Data Protection Legislation, ASSA ABLOY may aggregate, deidentify, or anonymize personal information so it no longer meets the Personal Data definition, and may use such aggregated, deidentified, or anonymized data for its own research and development purposes. ASSA ABLOY will not attempt to or actually re-identify any previously aggregated, deidentified, or anonymized data and will contractually prohibit downstream data recipients from attempting to or actually re- identifying such data.

Audit Rights and Locations. End Customer shall have the right to perform audits of ASSA ABLOY’s processing of Personal Data on behalf of End Customer (including such processing as may be carried out by ASSA ABLOY’s subcontractorssub-processors, if any) in order to verify ASSA ABLOY’s, and any subcontractorsub- processor’s, compliance with this Agreement, such audits to take place in ASSA ABLOY´s ABLOY’s facilities. ASSA ABLOY will, during normal business hours and upon reasonable notice (whereby a notice period of twenty (20) business days shall always be deemed reasonable), provide an independent auditor, appointed by End Customer and approved by ASSA ABLOY, reasonable access to the parts of facilities where ASSA ABLOY is carrying out processing activities on behalf of End Customer, and to the information relating to the processing of Personal Data processed on behalf of End Customer under this Agreement. The audit shall be carried out as quickly as possible and it shall not disturb ASSA ABLOY’s normal business operations. The auditor shall comply with ASSA ABLOY’s work rules, security requirements and standards when conducting site visits. Before commencing any audit, the independent auditor (including relevant parties/persons conducting the audit) shall enter into the non-disclosure agreement(s) provided by ASSA ABLOY. End Customer is responsible for all costs associated with the audit, save for when the audit concludes a material breach of ASSA ABLOY’s undertakings as set forth in this Clause 56. If so, ASSA ABLOY shall compensate End Customer for reasonable and verified costs associated with the audit. All work products product generated in the course of an audit shall be ASSA ABLOY´s ABLOY property. For the avoidance of doubt, the audit rights set forth herein are subject to End Customer’s and the independent auditor’s compliance with the restrictions and limitations set forth supra. A Supervisory Authority shall always have direct and unrestricted access to ASSA ABLOY's premises, data processing equipment and documentation in order to investigate that ASSA ABLOY’s processing of Personal Data processed on behalf of End Customer is performed in accordance with the Applicable Data Protection Legislation.