Common use of DATA PRIVACY Security Clause in Contracts

DATA PRIVACY Security. AvePoint shall use commercially rea- sonable technical and organisational measures designed to prevent unauthorised access, use, alteration, or disclo- sure of the Solutions or Customer Data, as further de- scribed in AvePoint’s then-current DPIS Policy. Customer Data. All Personal Data received or collected by AvePoint in connection with the performance of this Agreement (including its amendments) will be pro- cessed in accordance with AvePoint’s Privacy Policy, which can be accessed at xxxx://xxx.xxxxxxxx.xxx/com- pany/privacy-policy, as amended from time to time. Any Personal Data received or collected by AvePoint or its Af- filiates will further be processed in accordance with appli- cable data protection laws. Where the Personal Data is that of a third party, Customer certifies that it has obtained that data pursuant to applicable data protection laws and has obtained all necessary authorisations and consents with respect to such information. AvePoint shall maintain ad- ministrative, physical, and technical safeguards for protec- tion of the security, confidentiality and integrity of Cus- tomer Data and Business Contact Information, including, but not limited to measures for preventing access, use, modification or disclosure of Customer Data or Business Contact Information except (a) to provide the SaaS Solu- tions and prevent or address service or technical prob- lems; (b) as compelled by law; or (c) as expressly permitted by Customer in writing. Such specific safeguards shall be as set forth in the Documentation. When providing Cus- tomer Data or Business Contact Information, Customer shall not under any circumstances provide Personal Data to AvePoint for the processing of such data on behalf of Customer, as defined in Article 28.1 GDPR, unless agreed otherwise by way of a separate written agreement be- tween the Parties. All Customer Data passing through SaaS Solutions is stored by AvePoint in a Customer-selected data centre. If there is a geographic region indicated on the applicable Order or the website where Customer reg- isters for the SaaS Solutions, Customer Data and all oper- ations will reside and execute from that geographic re- gion's data centre, save for (temporary) emergency CONFIDENTIALITÉ DES DONNÉES Données du client. Toutes les Données Personnelles re- çues ou collectées par AvePoint dans le cadre de l'exécu- tion du présent Contrat (y compris ses modifications) se- ront traitées conformément à la Politique de Confidentialité d'AvePoint, qui peut être consultée à l'adresse xxxx://xxx.xxxxxxxx.xxx/company/privacy-po- licy , telle que modifiée de temps à autre. Toute Donnée Personnelle reçue ou collectée par AvePoint ou ses Affi- liées sera en outre traitée conformément aux lois appli- cables en matière de protection des données. Lorsque les Données Personnelles sont celles d'un tiers, le Client cer- tifie qu'il a obtenu ces données conformément aux lois ap- plicables en matière de protection des données et qu'il a obtenu toutes les autorisations et tous les consentements nécessaires concernant ces informations. AvePoint main- tiendra des garanties administratives, physiques et tech- niques pour la protection de la sécurité, de la confidentia- lité et de l'intégrité des Données du Client et des Informations d’Affaires, y compris, mais sans s'y limiter, des mesures pour empêcher l'accès, l'utilisation, la modi- fication ou la divulgation des Données du Client ou des Informations de Contact Commerciales, sauf (a) pour four- nir les Solutions SaaS et prévenir ou résoudre les pro- blèmes de service ou techniques ; (b) si contraint par la loi ; ou (c) avec l’autorisation expresse et écrite du Client. Ces mesures de protection spécifiques sont définies dans la documentation. Lorsqu'il fournit des Données du Client ou des Informations d’Affaires, le Client ne fournira en aucun cas des Données Personnelles à AvePoint pour le traite- ment de ces données au nom du Client, tel que défini à l'article 28.1 RGPD, sauf accord contraire par le biais d'un accord écrit distinct entre les Parties. Toutes les Données du Client passant par les Solutions SaaS sont stockées par AvePoint dans un centre de données sélectionné par le Client. S'il existe une région géographique indiquée sur la purposes. Customer acknowledges and to the extent nec- essary approves that information provided to AvePoint (other than Customer Data) may be stored and processed by AvePoint in the United States or in other countries. Rights in Customer Data. Customer is solely re- sponsible for the accuracy, content, and legality of all Cus- tomer Data. Customer represents and warrants to Ave- Point that (1) Customer will comply with all applicable laws in its use of the Solutions (including but not limited to, if applicable, GDPR and similar laws governing the protec- tion of personal data) and (2) Customer has provided all disclosures and obtained all necessary rights, consents and permissions to collect, share and use Customer Data as contemplated in this Agreement (including granting AvePoint the rights herein) without violation or infringe- ment of (i) any third party intellectual property, publicity, privacy or other rights, (ii) any Laws, or (iii) any terms of service, privacy policies or other agreement governing Customer Properties or Customer’s accounts with third- parties. Customer grants to AvePoint and its Affiliates a non-exclusive, worldwide, limited-term license to use, store, host, copy, transmit, modify, create derivative works of, and display Customer Data and Business Contact Infor- mation solely as necessary for AvePoint to provide the So- lutions and/or Services as the case may be, in accordance with this Agreement. Subject to these limited licenses, AvePoint shall acquire no right, title, or interest from Cus- tomer under this Agreement in or to Customer Data or Business Contact Information. Customer grants AvePoint and its Affiliates a worldwide, perpetual, irrevocable, roy- alty-free license to use and incorporate into the Solutions or the Documentation any request, comments, sugges- tion, recommendation, correction, or other feedback pro- vided by Customer related to the Solutions (“Feedback”). AvePoint may freely use or exploit Feedback in connection with any of its products or services. Indemnification by Customer. Customer shall indemnify, defend and hold harmless AvePoint (including its Affiliates) from and against any and all third-party claims, costs, damages, losses, liabilities, judgments, set- tlements, and expenses (including reasonable attorneys’ fees and costs) arising out of or in connection with any Customer Materials, Customer Data, or breach or alleged breach by Customer of Section 2.3 (Rights in Customer Data). This indemnification obligation is subject to Cus- tomer receiving (i) prompt written notice of such claim; (ii) the exclusive right to control and direct the investigation, Commande applicable ou sur le site Internet où le Client s'inscrit aux Solutions SaaS, les Données du Client et toutes les opérations résideront et seront exécutées à par- tir du centre de données de cette région géographique, sauf à des fins d'urgence (temporaire). Le Client reconnaît et, dans la mesure nécessaire, approuve que les informa- tions fournies à AvePoint (autres que les Données du Client) peuvent être stockées et traitées par AvePoint aux États-Unis ou dans d'autres pays.

DATA PRIVACY Security. AvePoint shall use commercially rea- sonable reasonable technical and organisational measures designed de- signed to prevent unauthorised access, use, alteration, or disclo- sure disclosure of the Solutions or Customer Data, as further de- scribed fur- ther described in AvePoint’s then-current DPIS Policy. Customer Data. All Personal Data received or collected by AvePoint in connection with the performance perfor- xxxxx of this Agreement (including its amendments) will be pro- cessed processed in accordance with AvePoint’s Privacy Pri- vacy Policy, which can be accessed at xxxx://xxx.xxxxxxxx.xxx/com- pany/privacy-policyxxxx://xxx.xxx- xxxxx.xxx/xxxxxxx/xxxxxxx-xxxxxx, as amended from time to time. Any Personal Data received or collected by AvePoint or its Af- filiates Affiliates will further be processed in accordance with appli- cable applicable data protection laws. Where the Personal Data is that of a third party, Customer Cus- tomer certifies that it has obtained that data pursuant to applicable data protection laws and has obtained all necessary authorisations and consents with respect to such information. AvePoint shall maintain ad- ministrativeadministra- tive, physical, and technical safeguards for protec- tion protection of the security, confidentiality and integrity of Cus- tomer Data and Business Contact Information, includinginclud- ing, but not limited to measures for preventing access, use, modification or disclosure of Customer Data or Business Contact Information except (a) to provide the SaaS Solu- tions Solutions and prevent or address service or technical prob- lemstech- nical problems; (b) as compelled by law; or (c) as expressly ex- pressly permitted by Customer in writing. Such specific safeguards shall be as set forth in the Documentation. When providing Cus- tomer Customer Data or Business Contact Information, Customer shall not under any circumstances circum- stances provide Personal Data to AvePoint for the processing pro- cessing of such data on behalf of Customer, as defined in Article 28.1 GDPR, unless agreed otherwise by way of a separate written agreement be- tween between the Parties. All Customer Data passing through SaaS Solutions is stored by AvePoint in a Customer-selected data centre. If there is a geographic region indicated on the applicable appli- cable Order or the website where Customer reg- isters for the SaaS Solutions, Customer Data and all oper- ations will reside and execute from that geographic re- gion's data centre, save for (temporary) emergency CONFIDENTIALITÉ DES DONNÉES Données du client. Toutes les Données Personnelles re- çues ou collectées par AvePoint dans le cadre de l'exécu- tion du présent Contrat (y compris ses modifications) se- ront traitées conformément à la Politique de Confidentialité d'AvePoint, qui peut être consultée à l'adresse xxxx://xxx.xxxxxxxx.xxx/company/privacy-po- licy , telle que modifiée de temps à autre. Toute Donnée Personnelle reçue ou collectée par AvePoint ou ses Affi- liées sera en outre traitée conformément aux lois appli- cables en matière de protection des données. Lorsque les Données Personnelles sont celles d'un tiers, le Client cer- tifie qu'il a obtenu ces données conformément aux lois ap- plicables en matière de protection des données et qu'il a obtenu toutes les autorisations et tous les consentements nécessaires concernant ces informations. AvePoint main- tiendra des garanties administratives, physiques et tech- niques pour la protection de la sécurité, de la confidentia- lité et de l'intégrité des Données du Client et des Informations d’Affaires, y compris, mais sans s'y limiter, des mesures pour empêcher l'accès, l'utilisation, la modi- fication ou la divulgation des Données du Client ou des Informations de Contact Commerciales, sauf (a) pour four- nir les Solutions SaaS et prévenir ou résoudre les pro- blèmes de service ou techniques ; (b) si contraint par la loi ; ou (c) avec l’autorisation expresse et écrite du Client. Ces mesures de protection spécifiques sont définies dans la documentation. Lorsqu'il fournit des Données du Client ou des Informations d’Affaires, le Client ne fournira en aucun cas des Données Personnelles à AvePoint pour le traite- ment de ces données au nom du Client, tel que défini à l'article 28.1 RGPD, sauf accord contraire par le biais d'un accord écrit distinct entre les Parties. Toutes les Données du Client passant par les Solutions SaaS sont stockées par AvePoint dans un centre de données sélectionné par le Client. S'il existe une région géographique indiquée sur la purposes. Customer acknowledges and to the extent nec- essary approves that information provided to AvePoint (other than Customer Data) may be stored and processed by AvePoint in the United States or in other countries. Rights in Customer Data. Customer is solely re- sponsible for the accuracy, content, and legality of all Cus- tomer Data. Customer represents and warrants to Ave- Point that (1) Customer will comply with all applicable laws in its use of the Solutions (including but not limited to, if applicable, GDPR and similar laws governing the protec- tion of personal data) and (registers 2) Customer has provided all disclosures and obtained all necessary rights, consents and permissions to collect, share and use Customer Data as contemplated in this Agreement (including granting AvePoint the rights herein) without violation or infringe- ment of (i) any third party intellectual property, publicity, privacy or other rights, (ii) any Laws, or (iii) any terms of service, privacy policies or other agreement governing Customer Properties or Customer’s accounts with third- parties. Customer grants to AvePoint and its Affiliates a non-exclusive, worldwide, limited-term license to use, store, host, copy, transmit, modify, create derivative works of, and display Customer Data and Business Contact Infor- mation solely as necessary for AvePoint to provide the So- lutions and/or Services as the case may be, in accordance with this Agreement. Subject to these limited licenses, AvePoint shall acquire no right, title, or interest from Cus- tomer under this Agreement in or to Customer Data or Business Contact Information. Customer grants AvePoint and its Affiliates a worldwide, perpetual, irrevocable, roy- alty-free license to use and incorporate into the Solutions or the Documentation any request, comments, sugges- tion, recommendation, correction, or other feedback pro- vided by Customer related to the Solutions (“Feedback”). AvePoint may freely use or exploit Feedback in connection with any of its products or services. Indemnification by Customer. Customer shall indemnify, defend and hold harmless AvePoint (including its Affiliates) from and against any and all third-party claims, costs, damages, losses, liabilities, judgments, set- tlements, and expenses (including reasonable attorneys’ fees and costs) arising out of or in connection with any Customer Materials, Customer Data, or breach or alleged breach by Customer of Section 2.3 (Rights in Customer Data). This indemnification obligation is subject to Cus- tomer receiving (i) prompt written notice of such claim; (ii) the exclusive right to control and direct the investigation, Commande applicable ou sur le site Internet où le Client s'inscrit aux Solutions SaaS, les Données du Client et toutes les opérations résideront et seront exécutées à par- tir du centre de données de cette région géographique, sauf à des fins d'urgence (temporaire). Le Client reconnaît et, dans la mesure nécessaire, approuve que les informa- tions fournies à AvePoint (autres que les Données du Client) peuvent être stockées et traitées par AvePoint aux États-Unis ou dans d'autres pays.