Data Controller The Sponsor shall be the data controller for such personal data except that, if Quintiles deals with any personal data under this Agreement in the manner of a data controller, Quintiles shall be the data controller of such personal data to the extent of such dealings. Quintiles may process "personal data", as defined in the applicable data protection legislation enacted under the same or equivalent/similar national legislation (collectively "Data Protection Legislation"), of the Investigator and Study Staff for study-related purposes and all such processing will be carried out in accordance with the Data Protection Legislation. 6.4
Details of Data Processing (a) Subject matter: The subject matter of the data processing under this DPA is the Customer Data.
Data Processing In this clause:
Data Processing Addendum The parties’ agreement with respect to the processing of personal information submitted to the Subscription Service is described in the Data Processing Addendum attached to this Subscription Service Guide as Exhibit A.4 and incorporated herein by reference. The Data Processing Addendum may be updated periodically.
Quality Management System Supplier hereby undertakes, warrants and confirms, and will ensue same for its subcontractors, to remain certified in accordance with ISO 9001 standard or equivalent. At any time during the term of this Agreement, the Supplier shall, if so instructed by ISR, provide evidence of such certifications. In any event, Supplier must notify ISR, in writing, in the event said certification is suspended and/or canceled and/or not continued.