Common use of DATA PRIVACY AND PROTECTION Clause in Contracts

DATA PRIVACY AND PROTECTION. The Buyer shall (i) comply with all applicable data protection laws in respect of the Processing of Personal Data, including the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”); (ii) only Process Personal Data to the extent necessary to perform its obligations under this GTCoS and for no other purpose; and (iii) implement and maintain appropriate technical, organizational and security measures to ensure that Personal Data is adequately protected against unauthorized Processing, disclosure, loss or misuse. The Buyer shall not transfer any Personal Data to any recipient without the Seller’s prior written consent. The Buyer shall promptly notify the Seller if it suspects, or is aware of, any data breach involving Personal Data within 24 hours after having become aware of it, in which case, the Seller shall be entitled to terminate all transactions and business relationship with the Buyer. As used in this clause, “Personal Data” and “Process/Processing” have the meanings set out in the GDPR. The Buyer shall comply with any directions and/or requirements of the Seller pertaining to any mandatory breach of Personal Data notification requirements under any applicable law.

DATA PRIVACY AND PROTECTION. The Buyer Seller shall (i) comply with all applicable data protection laws in respect of the Processing of Personal Data, including the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”); (ii) only Process Personal Data to the extent necessary to perform its obligations under this GTCoS GTCoP and for no other purpose; and (iii) implement and maintain appropriate technical, organizational and security measures to ensure that Personal Data is adequately protected against unauthorized Processing, disclosure, loss or misuse. The Buyer Seller shall not transfer any Personal Data to any recipient without the SellerBuyer’s prior written consent. The Buyer Seller shall promptly notify the Seller Buyer if it suspects, or is aware of, any data breach involving Personal Data within 24 hours after having become aware of it, in which case, the Seller Buyer shall be entitled to terminate all transactions and business relationship with the BuyerSeller. As used in this clause, “Personal Data” and “Process/Processing” have the meanings set out in the GDPR. The Buyer Seller shall comply with any all directions and/or requirements of the Seller Buyer pertaining to any mandatory breach of Personal Data notification requirements under any applicable law.

DATA PRIVACY AND PROTECTION. The Buyer Service Provider shall (i) comply with all applicable data protection laws in respect of the Processing of Personal Data, including the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”); (ii) only Process Personal Data to the extent necessary to perform its obligations under this GTCoS GTCoPS and for no other purpose; and (iii) implement and maintain appropriate technical, organizational and security measures to ensure that Personal Data is adequately protected against unauthorized Processing, disclosure, loss or misuse. The Buyer Service Provider shall not transfer any Personal Data to any recipient without the SellerBuyer’s prior written consent. The Buyer Service Provider shall promptly notify the Seller Buyer if it suspects, or is aware of, any data breach involving Personal Data within 24 hours after having become aware of it, in which case, the Seller Buyer shall be entitled to terminate all transactions and business relationship with the BuyerService Provider. As used in this clause, “Personal Data” and “Process/Processing” have the meanings set out in the GDPR. The Buyer Service Provider shall comply with any all directions and/or requirements of the Seller Buyer pertaining to any mandatory breach of Personal Data notification requirements under any applicable law.