Controller Responsibilities. Notwithstanding the above, Controller agrees that except as provided by this DPA, Controller is responsible for its secure use of the Services, including securing its Account authentication credentials, protecting the security of Personal Data when in transit to and from the Services, and taking any appropriate steps to securely encrypt or backup any Personal Data uploaded to the Services.
Controller Responsibilities. With regard to Subscriber Personal Data, iCIMS shall not undertake any task that according to Data Protection & Privacy Laws is assigned to be performed by the Subscriber, in their capacity as Data Controller.
Controller Responsibilities. Data Protection Impact Assessment: The Customer as Controller is responsible for performing risk and impact assessments with respect to Personal Data it submits to InterVision pursuant to Articles 35 and 36 of the GDPR. Accordingly, the Customer is responsible for determining the appropriate technical and administrative controls required to mitigate risks identified and comply with applicable Data Protection Laws. Compliance with Data Protection Law: Within the scope of this DPA, the Agreement and its use of the services, Customer as Controller shall be solely responsible for complying with the statutory requirements related to data protection and privacy, particularly regarding the disclosure and transfer of Personal Data to InterVision for the Processing of Personal Data. The Customer’s instructions to InterVision for the Processing of Personal Data shall comply with the applicable Data Protection Law. Processing Instructions: Additional instructions outside the scope of this DPA will require prior written agreement between the parties as additional charges may apply. Instructions shall initially be specified in the Agreement and may thereafter be amended, amplified, or replaced by the Customer as a Change or addendum to the original Agreement. Customer is responsible that all of its instructions are lawful and the Processing of Personal Data in accordance with such instructions will not violate applicable Data Protection Laws. Information Security: The Customer as Controller is responsible for validating the integrity, completeness, and accuracy of Personal Data it submits to InterVision. Transfers of data outside of InterVision’s hosted environment may require unencrypted communications. The content of communications (including sender and recipient addresses) sent through email or messaging services may not be encrypted. Controller determines the suitability of communication and transfer protocols for Personal Data it submits to InterVision. Controller opts to use unencrypted file transfer protocols or email to transmit Personal Data to InterVision as Processor, the Customer as Controller is solely responsible for its decision.
a. The Customer is responsible for the security policies, procedures, and configuration settings for its operating systems and applications environments housed on InterVision’s hosted platforms, including but not limited to, password configuration settings, auditing settings, operating server settings, and application settings.
...
Controller Responsibilities a. You agree that (i) you shall comply with your obligations as a Controller under GDPR or Privacy/Data Protection Laws in respect of your processing of Customer Personal Data and any processing instructions you issue to BMS and (ii) you have provided notice and obtained (or shall obtain) all consents and rights necessary for BMS to process Personal Data and provide the Services pursuant to the Agreement and this DPA.
b. As the Controller, you agree to implement appropriate technical and organizational measures for ensuring that, by default, only Personal Data which are necessary for each specific purpose of the Processing are processed. That obligation applies to the amount of Personal Data collected, the extent of their Processing, the period of their storage and their accessibility.
c. You agree to provide to BMS and also promptly update, when necessary, the information indicated below: • identity and contact information of your Data Protection Officer, if applicable; • identity and contact information of your EU representative, if applicable;
b. Unless otherwise directed by written instructions from you, the subject matter, nature and purpose of the Processing, and the types of Personal Data and categories of Data Subjects are as defined in Schedule 1.
Controller Responsibilities. Notwithstanding the above, Controller agrees that except to the extent expressly provided in this DPA, Controller is responsible for its secure use of the Services, including securing its account authentication credentials, protecting the security of Controller Data when in transit to and from the Services and taking any appropriate steps to securely encrypt or backup any Controller Data uploaded to the Services. Confidentiality of Processing. Mobfolio will ensure that any person who is authorized by Mobfolio to process Controller Data (including its staff, agents and subcontractors) will be under an appropriate obligation of confidentiality (whether a contractual or statutory duty). Security Incident Response. Processor shall notify Controller without undue delay upon Processor or any Sub-processor becoming aware of a Personal Data Breach affecting Controller Personal Data, providing Company with sufficient information to allow Controller to meet any obligations to report or inform Data Subjects of the Personal Data Breach under the Data Protection Laws.
Controller Responsibilities. Controller shall, in its use of the Services, Process Personal Data in accordance with the requirements of applicable Data Protection Laws and shall ensure that its instructions for Processing of Personal Data are compliant with applicable such Data Protection Laws and all other applicable laws. If Controller issues instructions orally, Controller shall promptly confirm such oral instructions in writing.
Controller Responsibilities. 3.1 Within the scope of the Subscription Agreement and in its use of the Services, Subscriber will be responsible for complying with all requirements that apply to it under applicable Data Protection Laws with respect to its Processing of Personal Data and the instructions it issues to HackTheBox. In particular but without prejudice to the generality of the foregoing, Subscriber acknowledges and agrees that will be solely responsible for (i) the accuracy and legality of Subscriber Data and the means by which Subscriber acquired Personal Data; (ii) complying with all necessary transparency and lawfulness requirements under applicable Data Protection Laws for the collection and use of the Personal Data, including obtaining any necessary consents and authorizations; (iii) ensuring Subscriber has the right to transfer, or provide access to, the Personal Data to HackTheBox for Processing in accordance with the terms of the Subscription Agreement (including this DPA); and (v) complying with all applicable laws related to the use of the Services.
3.2 The parties agree that the Subscription Agreement (including this DPA), together with Subscriber’s use of the Service in accordance with the Subscription Agreement, constitute Subscriber’s complete Instructions to HackTheBox in relation to the Processing of Personal Data, so long as Subscriber may provide additional written instructions during the subscription term that are consistent with the Subscription Agreement, the nature and lawful use of the Service.
3.3 Subscriber is responsible for independently determining whether the data security provided for in the Service adequately meets its obligations under applicable privacy and data protection laws.
3.4 Subscriber will retain control of the Personal Data and remain responsible for its compliance obligations under the applicable privacy and data protection requirements. Without limitation, Subscriber agrees that is solely responsible for providing any required notices and obtaining any required consents for the processing instructions it gives to HackTheBox and its secure use of the Services, including (a) making appropriate use of the Services to ensure a level of security appropriate to the risk in respect of the Personal Data; (b) securing the account authentication credentials, systems and devices Subscriber and its Authorised Users use to access and use the Services; (c) securing Subscriber’s systems and devices that it uses to access and use the Services; and...
Controller Responsibilities. Charter Section 262 requires the Controller to, among other things, have adequate evidence that (1) the appropriation for the goods or services has been made; (2) the prices charged are reasonable; and, (3) any additional criteria established by ordinance have been satisfied before approving payment of demands drawn upon the City Treasury. In addition, the Charter authorizes the Controller to delegate payment functions to Departments and charges the Controller with the responsibility to regularly review the accounting practices of Departments. To streamline the payment approval process, departments certified under the Certification and Fiscal Monitoring Program (CFMP) (Certified Departments) is not required to obtain Controller approval. Travel advances and City’s travel credit card payments are processed by the Controller’s Office.
Controller Responsibilities. Notwithstanding the above, Controller agrees that except to the extent expressly provided in this DPA, Controller is solely responsible for its secure use of the Service, including securing its account authentication credentials, setting the necessary permission levels for Account Users and taking any appropriate steps to securely store any Controller Data downloaded from the Service. If Controller becomes aware of any unauthorized access to its account, Controller should notify Bookeo immediately. Controller agrees and warrants that Account Users credentials may not be shared and may only be used by one individual (Account User) per account. Controller agrees to keep its business details (name of the business, business address, business phone number and email address) current and accurate. This will allow Controller’s Customers to contact the Controller directly and submit data subject access requests. Controller agrees that the Bookeo Service is not intended for use by Minors. Minors are individuals under the age of 13 (or under a higher age if permitted by the laws of their residence). If Controller or Account Users are a Minor, Controller or Account Users may not use the Services. By using the Services, Controller agrees and warrants that Controller or Account Users are not a Minor. Controller agrees that Controller is solely responsible and liable for its use of Third-party apps and third-party integrations.
Controller Responsibilities. In accordance with Charter Section 262, the Controller has delegated the pre-review and approval of travel authorities and expenditures to Council-controlled Departments. The Controller will conduct periodic reviews of Departmental compliance with the City Travel Policy, as well as post-review of travel transactions. The Controller may suspend delegated travel approval authority until review findings are corrected. The proprietary departments, the Los Angeles Fire and Police Pension (LAFPP), and the Los Angeles City Employees Retirement System (LACERS) are governed by their respective boards. The Controller review will be in accordance with the respective board- adopted travel policies.
