Common use of Conga's CCPA Obligations Clause in Contracts

Conga's CCPA Obligations. (a) Conga will only collect, use, retain, or disclose personal information for the Contracted Business Purposes for which Customer provides or permits personal information access. (b) Conga will not collect, use, retain, disclose, sell, or otherwise make personal information available in a way that does not comply with the CCPA. If a law requires Conga to disclose personal information for a purpose unrelated to the Contracted Business Purpose, Conga must first inform the Customer of the legal requirement and give the Customer an opportunity to object or challenge the requirement, unless applicable law prohibits such notice. (c) To the extent commercially reasonable, Conga will limit personal information collection, use, retention, and disclosure to activities reasonably necessary and proportionate to achieve the Contracted Business Purposes or another compatible operational purpose. (d) Conga must promptly comply with any Customer request or instruction requiring the Conga to provide, amend, transfer, or delete the personal information, or to stop, mitigate, or remedy any unauthorized processing. If Customer is able to amend, transfer, or delete the personal information itself and chooses Xxxxx’s assistance, Customer agrees to pay reasonable fees for such assistance at a rate mutually agreed in advance between the Parties. (e) If the Contracted Business Purposes require the collection of personal information from individuals on the Customer's behalf, Conga will always provide a CCPA-compliant notice addressing use and collection methods. (f) If the CCPA permits, Conga may aggregate, deidentify, or anonymize personal information, so it no longer meets the personal information definition, and may use such aggregated, deidentified, or anonymized data for its own research and development purposes. Conga will not attempt to or actually re-identify any previously aggregated, deidentified, or anonymized data and will contractually prohibit downstream data recipients from attempting to or actually re-identifying such data.

Conga's CCPA Obligations. (a) Conga will only collect, use, retain, or disclose personal information for the Contracted Business Purposes for which Customer provides or permits personal information access. (b) Conga will not collect, use, retain, disclose, sell, or otherwise make personal information available in a way that does not comply with the CCPA. If a law requires Conga to disclose personal information for a purpose unrelated to the Contracted Business Purpose, Conga must first inform the Customer of the legal requirement and give the Customer an opportunity to object or challenge the requirement, unless applicable law prohibits such notice. (c) To the extent commercially reasonable, Conga will limit personal information collection, use, retention, and disclosure to activities reasonably necessary and proportionate to achieve the Contracted Business Purposes or another compatible operational purpose. (d) Conga must promptly comply with any Customer request or instruction requiring the Conga to provide, amend, transfer, or delete the personal information, or to stop, mitigate, or remedy any unauthorized processing. If Customer is able to amend, transfer, or delete the personal information itself and chooses XxxxxConga’s assistance, Customer agrees to pay reasonable fees for such assistance at a rate mutually agreed in advance between the Parties. (e) If the Contracted Business Purposes require the collection of personal information from individuals on the Customer's behalf, Conga will always provide a CCPA-compliant notice addressing use and collection methods. (f) If the CCPA permits, Conga may aggregate, deidentify, or anonymize personal information, so it no longer meets the personal information definition, and may use such aggregated, deidentified, or anonymized data for its own research and development purposes. Conga will not attempt to or actually re-identify any previously aggregated, deidentified, or anonymized data and will contractually prohibit downstream data recipients from attempting to or actually re-identifying such data.

Conga's CCPA Obligations. (a) Conga will only collect, use, retain, or disclose personal information for the Contracted Business Purposes for which Customer provides or permits personal information access. (b) Conga will not collect, use, retain, disclose, sell, or otherwise make personal information available in a way that does not comply with the CCPA. If a law requires Conga to disclose personal information for a purpose unrelated to the Contracted Business Purpose, Conga must first inform the Customer of the legal requirement and give the Customer an opportunity to object or challenge the requirement, unless applicable law prohibits such notice. (c) To the extent commercially reasonable, Conga will limit personal information collection, use, retention, and disclosure to activities reasonably necessary and proportionate to achieve the Contracted Business Purposes or another compatible operational purpose. (d) Conga must promptly comply with any Customer request or instruction requiring the Conga to provide, amend, transfer, or delete the personal information, or to stop, mitigate, or remedy any unauthorized processing. If Customer is able to amend, transfer, or delete the personal information itself and chooses XxxxxConga’s assistance, Customer agrees to pay reasonable fees for such assistance at a rate mutually agreed in advance between the Partiesparties. (e) If the Contracted Business Purposes require the collection of personal information from individuals on the Customer's behalf, Conga will always provide a CCPA-compliant notice addressing use and collection methods. (f) If the CCPA permits, Conga may aggregate, deidentify, or anonymize personal information, so it no longer meets the personal information definition, and may use such aggregated, deidentified, or anonymized data for its own research and development purposes. Conga will not attempt to or actually re-identify any previously aggregated, deidentified, or anonymized data and will contractually prohibit downstream data recipients from attempting to or actually re-identifying such data.