Common use of CUSTOMER RIGHTS AND OBLIGATIONS Clause in Contracts

CUSTOMER RIGHTS AND OBLIGATIONS. The Customer shall (i) process the personal data in compliance with the Data Protection Regulation; (ii) be entitled to give written instructions to Iron Mountain on the processing of personal data. Such instructions shall be binding on Iron Mountain on the condition that if the completion of the instructions requires the provision of services under the Agreement, or result in costs emerging on Iron Mountain’s side, Customer shall simultaneously pay the applicable service fees/emerging costs. Iron Mountain will not meet any Customer instructions which are contrary to any Sections of this DPA; (iii) at all times retain the control and authority over the personal data. If any data subject requested for information on the processing of personal data, requested the correction of the personal data, disputed the legality of data-processing, or otherwise required the termination of data-processing, or the deletion or blocking of personal data, the Customer shall immediately instruct Iron Mountain to take the appropriate measures; and (iv) inform Iron Mountain of the categories of personal data processed under the Agreement, and the data subjects involved with data-processing. Iron Mountain raises the Customer’s attention that it provides the services on the physical forms of Customer’s documents/media (Articles, Folders, Boxes, Media, Media Container, etc.), but not directly on the content of these documents/media, so particularly on the personal data contained therein. Given this, it is Customer’s responsibility to notify Iron Mountain in writing should the personal data/data subjects involved with data-processing would be other than as listed in Appendix 1.

CUSTOMER RIGHTS AND OBLIGATIONS. The Customer shall (i) process the personal data in compliance with the Data Protection Regulation; (ii) be entitled to give written instructions to Iron Mountain on the processing of personal data. Such instructions shall be binding on Iron Mountain on the condition that if the completion of the instructions requires the provision of services under the Agreement, or result in costs emerging on Iron Mountain’s side, Customer shall simultaneously pay the applicable service fees/emerging costs. Iron Mountain will not meet any Customer instructions which are contrary to any Sections of this DPA; (iii) at all times retain the control and authority over the personal data. If any data subject requested for information on the processing of personal data, requested the correction of the personal data, disputed the legality of data-processing, or otherwise required the termination of data-processing, or the deletion or blocking of personal data, the Customer shall immediately instruct Iron Mountain to take the appropriate measures; and (iv) inform Iron Mountain of the categories of personal data processed under the Agreement, and the data subjects involved with data-processing. Iron Mountain raises the Customer’s attention that it provides the services on the physical forms of Customer’s documents/media documents (Articles, Folders, Boxes, Media, Media Container, etc.), but not directly on the content of these documents/media, so particularly on the personal data contained therein. Given this, it is Customer’s responsibility to notify Iron Mountain in writing should the personal data/data subjects involved with data-processing would be other than as listed in Appendix 1.