Common use of Complaints and rights of data subjects Clause in Contracts

Complaints and rights of data subjects. 5.1. The Processor shall ensure that it protects the rights of data subjects under the Data Privacy Laws and shall: 5.1.1. promptly notify the Controller in writing (within at least two working days) if it receives: (a) a request from a data subject to have access to his or her Protected Data or to exercise any of his or her rights under Articles 15-22 GDPR; or (b) a complaint or request relating to the Controller's obligations under the Data Privacy Laws; and 5.1.2. provide the Controller with full co-operation and assistance in relation to any such complaint or request made, including by: (a) promptly providing the Controller with full details of any complaint or request and any additional information requested by the Controller; (b) taking all steps necessary to enable the Controller to comply with a request from a data subject within the relevant timescale set out in the Data Privacy Laws and in accordance with the Controller's reasonable instructions; (c) providing the Controller with any Protected Data it holds in relation to a data subject (within the timescales required by the Controller); (d) using appropriate technical and organisational measures as far as this is possible, to assist the Controller to respond to requests from data subjects to exercise their rights; and (e) ensuring that (other than as set out above) no reply or other communication is made in response to such complaint or request unless approved by the Controller.

Complaints and rights of data subjects. 5.12.1. The Processor shall ensure that it protects the rights of data subjects under the Data Privacy Laws and shall: 5.1.12.1.1. promptly notify the Controller in writing (within at least two working days) if it receives: (a) a request from a data subject to have access to his or her Protected Data or to exercise any of his or her rights under Articles 15-22 GDPR; or (b) a complaint or request relating to the Controller's obligations under the Data Privacy Laws; and 5.1.22.1.2. provide the Controller with full co-operation and assistance in relation to any such complaint or request made, including by: (a) promptly providing the Controller with full details of any complaint or request and any additional information requested by the Controller; (b) taking all steps necessary to enable the Controller to comply with a request from a data subject within the relevant timescale set out in the Data Privacy Laws and in accordance with the Controller's reasonable instructions; (c) providing the Controller with any Protected Data it holds in relation to a data subject (within the timescales required by the Controller); (d) using appropriate technical and organisational measures as far as this is possible, to assist the Controller to respond to requests from data subjects to exercise their rights; and (e) ensuring that (other than as set out above) no reply or other communication is made in response to such complaint or request unless approved by the Controller.