BORDER TRANSFERS OF PERSONAL DATA Sample Clauses

BORDER TRANSFERS OF PERSONAL DATA. ‌ 3.1. Cross-Border Transfers of Personal Data. Customer authorizes Company and its Third Parties to transfer Customer Personal Data across international borders, including from the European Economic Area (the “EEA”), the United Kingdom, and Switzerland to South Africa and Australia. Company and Customer agree to use the Standard Contractual Clauses as the adequacy mechanism supporting the transfer and Processing of Customer Personal Data, as further detailed below.
AutoNDA by SimpleDocs
BORDER TRANSFERS OF PERSONAL DATA. 6.1 If an adequate protection measure for the international transfer of Personal Data is required under applicable Data Protection Legislation (and has not otherwise been arranged by the parties) the Standard Contractual Clauses shall be incorporated into this Schedule in the International Transfers Appendix (Schedule 3) as if they had been set out in full.
BORDER TRANSFERS OF PERSONAL DATA. 6.1 Other than where the transfer is to an approved Subcontractor referred to at Clause 7 below, Pulsant (and any subcontractor) will not transfer or otherwise process the Client Data outside the UK/EEA without obtaining the Client’s prior written consent. Such consent is not to be unreasonably withheld or delayed. 6.2 Where such consent is granted or the Subcontractor is otherwise approved, Pulsant shall process, or permit the processing, of the Personal Data outside the UK/EEA under the following conditions: 6.2.1 Pulsant is processing the Personal Data in a territory which is subject to adequacy regulations under the Data Protection Legislation that the territory provides adequate protection for the privacy rights of individuals; or 6.2.2 Pulsant participates in a valid cross-border transfer mechanism under the Data Protection Legislation, so that Pulsant (and, where appropriate, the Client) can ensure that appropriate safeguards are in place to ensure an adequate level of protection with respect to the privacy rights of individuals as required by Article 46 of the UK GDPR and EU GDPR. 6.3 If any Client Data transfer between the Client and Pulsant requires execution of SCCs in order to comply with the Data Protection Legislation (where the Client is the entity exporting Personal Data to Pulsant outside the EEA), the parties shall be deemed to have executed, the SCCs/ contained in Appendix B, and take all other actions reasonably required to legitimise the transfer.
BORDER TRANSFERS OF PERSONAL DATA. 7.1 If an adequate protection measure for the international transfer of Personal Data is required under applicable data protection legislation (and has not otherwise been arranged by the parties) the SCCs shall be incorporated into this DPA in the Schedule as if they had been set out in full. 7.2 The Customer consents to Digital Shadows (and its sub-Processors) transferring Personal Data outside the United Kingdom and the European Economic Area ("GDPR Territories"). Provided that where such processing occurs, Digital Shadows: 7.2.1 is processing Personal Data in a territory which is subject to a current finding by the European Commission under the Data Protection Legislation that the territory provides adequate protection for the privacy rights of individuals; 7.2.2 participates in a valid cross-border transfer mechanism under the Data Protection Legislation, so that Digital Shadows (and, where appropriate, the Customer) can ensure that appropriate safeguards are in place to ensure an adequate level of protection with respect to the privacy rights of individuals as required by Article 46 of the General Data Protection Regulation ((EU) 2016/679); or 7.2.3 otherwise ensures that the transfer complies with the Data Protection Legislation. 7.3 In the case of any Processing of Personal Data outside of the GDPR Territories as at the date of this DPA, Digital Shadows has identified in the Schedule the relevant transfer mechanism. Digital Shadows will promptly inform the Customer of any change to such mechanisms. 7.4 The Customer authorises Digital Shadows to enter into the SCCs with the sub-Processor on the Customer’s behalf, if required to ensure the relevant Processing of Personal Data complies with Data Protection Legislation. Digital Shadows will make the executed SCC available to the Customer on written request.
BORDER TRANSFERS OF PERSONAL DATA. 7.1 If an adequate protection measure for the international transfer of Personal Data is required under applicable data protection legislation (and has not otherwise been arranged by the parties) the Standard Contractual Clauses shall be incorporated into this DPA in the Schedules as if they had been set out in full. 7.2 The Customer consents to Digital Shadows (and its sub-Processors) transferring Personal Data outside the United Kingdom and the European Economic Area ("GDPR Territories"). Provided that where such processing occurs, Digital Shadows: 7.2.1 is processing Personal Data in a territory which is subject to a current finding by the European Commission under the Data Protection Legislation that the territory provides adequate protection for the privacy rights of individuals; 7.2.2 participates in a valid cross-border transfer mechanism under the Data Protection Legislation, so that Digital Shadows (and, where appropriate, the Customer) can ensure that appropriate safeguards are in place to ensure an adequate level of protection with respect to the privacy rights of individuals as required by Article 46 of the GDPR; or 7.2.3 otherwise ensures that the transfer complies with the Data Protection Legislation. 7.3 In the case of any Processing of Personal Data outside of the GDPR Territories as at the date of this DPA, Digital Shadows has identified in the Schedules the relevant transfer mechanism. Digital Shadows will promptly inform the Customer of any change to such mechanisms. 7.4 Where Customer’s transfer of Personal Data to Digital Shadows (including in the context of an onward transfer) would be a transfer outside of the GDPR Territories under FADP, the EU Standard Contractual Clauses shall apply pursuant to clause 7.3, provided, however: 7.4.1 the termmember state’ shall not be interpreted in such a way as to exclude Data Subjects in Switzerland from the possibility of suing for their rights in their place of habitual residence (Switzerland) in accordance with Clause 18(c) of the EU Standard Contractual Clauses; 7.4.2 references to the GDPR should be understood as references to the FADP insofar as the data transfers are subject to the FADP; 7.4.3 the EU Standard Contractual Clauses also protects the data of legal entities until the entry into force of the revised FADP; and 7.4.4 the competent Supervisory Authority (for purposes of Annex 1.C (under Xxxxxx 13 of the EU Standard Contractual Clauses)) shall be the Federal Data Protection and Inf...
BORDER TRANSFERS OF PERSONAL DATA. 7.1 If an adequate protection measure for the international transfer of Personal Data is required under applicable data protection legislation (and has not otherwise been arranged by the parties) the Standard Contractual Clauses shall be incorporated into this DPA in the Schedules as if they had been set out in full. 7.2 The Customer consents to Verasity. (and its sub-Processors) transferring Personal Data outside the United Kingdom and the European Economic Area ("GDPR Territories"). Provided that where such processing occurs, Verasity.: 7.2.1 is processing Personal Data in a territory which is subject to a current finding by the European Commission under the Data Protection Legislation that the territory provides adequate protection for the privacy rights of individuals; 7.2.2 participates in a valid cross-border transfer mechanism under the Data Protection Legislation, so that Verasity. (and, where appropriate, the Customer) can ensure that appropriate safeguards are in place to ensure an adequate level of protection with respect to the privacy rights of individuals as required by Article 46 of the GDPR; or 7.2.3 otherwise ensures that the transfer complies with the Data Protection Legislation. 7.3 In the case of any Processing of Personal Data outside of the GDPR Territories as at the date of this DPA, Verasity. has identified in the Schedules the relevant transfer mechanism. Verasity. will promptly inform the Customer of any change to such mechanisms. 7.4 Where Customer’s transfer of Personal Data to Verasity. (including in the context of an onward transfer) would be a transfer outside of the GDPR Territories under FADP, the EU Standard Contractual Clauses shall apply pursuant to clause 7.3, provided, however: 7.4.1 the termmember state’ shall not be interpreted in such a way as to exclude Data Subjects in Switzerland from the possibility of suing for their rights in their place of habitual residence (Switzerland) in accordance with Clause 18(c) of the EU Standard Contractual Clauses; 7.4.2 references to the GDPR should be understood as references to the FADP insofar as the data transfers are subject to the FADP;
BORDER TRANSFERS OF PERSONAL DATA. 7.1. If and to the extent that the Provider’s Processing of Personal Data involves any Restricted Transfer, the Parties hereby agree to enter into Module Two of the EU Standard Contractual Clauses to facilitate the Restricted Transfers of Personal Data collected from the EEA and the UK Addendum to facilitate the Restricted Transfers of Personal Data collected from the United Kingdom, and the EU Standard Contractual Clauses and the UK Addendum shall be considered to be completed and populated in accordance with the terms set out in Appendix 2. 7.2. Any Restricted Transfer by the Provider shall be done only on the basis of documented instructions from Keyloop and in accordance with the Data Protection Laws. 7.3. Keyloop agrees that where the Processor engages a sub-processor in accordance with clause 7.2 above for carrying out specific processing activities under the terms of this Agreement and those processing activities involve a Restricted Transfer, the Provider and the sub-processor can ensure compliance with the Data Protection Laws by using the EU Standard Contractual Clauses and/or the UK Addendum as applicable. By signing this Agreement, Keyloop consents to the transfer of Personal Data to the International Recipients (if any) which are listed as Sub-processors in the Data Processing Details at the Effective Date.
AutoNDA by SimpleDocs
BORDER TRANSFERS OF PERSONAL DATA 

Related to BORDER TRANSFERS OF PERSONAL DATA

  • Transfer of Personal Information Supplier warrants to DXC that Personal Information provided to Supplier or obtained by Supplier under this Agreement on behalf of DXC (including any SOW) shall not be transferred across national boundaries unless authorized by law or specified within this Agreement or the applicable SOW as authorized for transfer across national boundaries. Supplier agrees that any such transfer will only be made in compliance with applicable Data Privacy Laws. If there is a conflict between this Section ‘Data Protection and Privacy’ and the other provisions of this Agreement, the requirements of this Section shall take precedence.

  • Processing of Personal Data 1.1. With regard to the Processing of Personal Data, You are the controller and determine the purposes and means of Processing of Personal Data You provide to Us (“Controller”) and You appoint Us as a processor (“Processor”) to process such Personal Data (hereinafter, “Data”) on Your behalf (hereinafter, “Processing”). 1.2. The details of the type and purpose of Processing are defined in the Exhibits attached hereto. Except where the DPA stipulates obligations beyond the Term of the Agreement, the duration of this DPA shall be the same as the Agreement Term. 1.3. You shall be solely responsible for compliance with Your obligations under the applicable Data Protection Laws, including, but not limited to, the lawful disclosure and transfer of Personal Data to Us by upload of source data into the Cloud Service or otherwise. 1.4. Processing shall include all activities detailed in this Agreement and the instructions issued by You. You may, in writing, modify, amend, or replace such instructions by issuing such further instructions to the point of contact designated by Us. Instructions not foreseen in or covered by the Agreement shall be treated as requests for changes. You shall, without undue delay, confirm in writing any instruction issued orally. Where We believe that an instruction would be in breach of applicable law, We shall notify You of such belief without undue delay. We shall be entitled to suspend performance on such instruction until You confirm or modify such instruction. 1.5. We shall ensure that all personnel involved in Processing of Customer Data and other such persons as may be involved in Processing shall only do so within the scope of the instructions. We shall ensure that any person Processing Customer Data is subject to confidentiality obligations similar to the confidentiality terms of the Agreement. All such confidentiality obligations shall survive the termination or expiration of such Processing.

  • Types of Personal Data Contact Information, the extent of which is determined and controlled by the Customer in its sole discretion, and other Personal Data such as navigational data (including website usage information), email data, system usage data, application integration data, and other electronic data submitted, stored, sent, or received by end users via the Subscription Service.

  • Protection of Personal Data 25.1 The Parties agree that they may obtain and have access to personal data for the duration of the Agreement for the fulfilment of the rights and obligations contained herein. In performing the obligations as set out in this Agreement, the Parties shall at all times ensure that: a) they process data only for the express purpose for which it was obtained; b) once processed for the purposes for which it was obtained, all data will be destroyed to an extent that it cannot be reconstructed to its original form; c) data is provided only to authorised personnel who strictly require the personal data to carry out the Parties’ respective obligations under this Agreement; d) they do not disclose personal data of the other Party, other than in terms of this Agreement; e) they have all reasonable technical and organisational measures in place to protect all personal data from unauthorised access and/or use; f) they have appropriate technical and organisational measures in place to safeguard the security, integrity and authenticity of all data in its possession or under its control in terms of this Agreement; g) such personal data is protected against unauthorised or unlawful processing, accidental loss, destruction or damage, alteration, disclosure or access. 25.2 The Parties agree that if personal data will be processed for additional purposes beyond the original purpose for which it was obtained, explicit consent must be obtained beforehand from those persons whose information will be subject to further processing. 25.3 Should it be necessary for either Party to disclose or otherwise make available the personal data to any third party (including sub-contractors and employees), it may do so only with the prior written permission of the other Party. The Party requiring such permission shall require of all such third parties, appropriate written undertakings to be provided, containing similar terms to that set forth in this clause 25, and dealing with that third party's obligations in respect of its processing of the personal data. Following approval by the other Party, the Party requiring permission agrees that the provisions of this clause 25 shall mutatis mutandis apply to all authorised third parties who process personal data. 25.4 The Parties shall ensure that any persons authorized to process data on their behalf (including employees and third parties) will safeguard the security, integrity and authenticity of all data. Where necessary to meet this requirement, the Parties shall keep all personal data and any analyses, profiles, or documents derived therefrom logically separated from all other data and documentation held by it. 25.5 The Parties shall carry out regular assessments to identify all reasonably foreseeable internal and external risks to the personal data in its possession or under its control. The Parties shall implement and maintain appropriate safeguards against the risks which it identifies and shall also regularly verify that the safeguards which it has in place has been effectively implemented. 25.6 The Parties agree that they will promptly return or destroy any personal data in their possession or control which belongs to the other Party once it no longer serves the purpose for which it was collected in relation to this Agreement, subject to any legal retention requirements. This may be at the request of the other Party and includes circumstances where a person has requested the Parties to delete all instances of their personal data. The information will be destroyed in such a manner that it cannot be reconstructed to its original form, linking it to any particular individual or organisation.

  • Categories of Personal Data Data Controller may submit Personal Data to the Subscription Service, the extent of which is solely determined by Data Controller, and may include the following categories: • communication data (e.g. telephone, email); • business and personal contact details; and • other Personal Data submitted to the Subscription Service.

Draft better contracts in just 5 minutes Get the weekly Law Insider newsletter packed with expert videos, webinars, ebooks, and more!