Common use of Data Controller and Data Processor Clause in Contracts

Data Controller and Data Processor. 1.1 The Customer and the Supplier acknowledge that, for the purposes of the Applicable Data Protection Legislation, the Customer is the Data Controller and it appoints the Supplier as a Data Processor in respect of the personal data described in Annex 1A. 1.2 The Customer warrants that it will only provide the Supplier with the personal data described in Annex 1A. 1.3 Any changes to Annex 1A (including, but not limited to, the categories of data) by either Party must be in accordance with the Variation process. The Parties agree that all reasonable costs of the Supplier in complying with the Request shall be borne by the Customer.