Common use of DATA PRIVACY Security Clause in Contracts

DATA PRIVACY Security. AvePoint shall use commercially reasonable technical and organisational measures de- signed to prevent unauthorised access, use, alteration, or disclosure of the Solutions or Customer Data, as fur- ther described in AvePoint’s then-current DPIS Policy. Customer Data. All Personal Data received or collected by AvePoint in connection with the perfor- xxxxx of this Agreement (including its amendments) will be processed in accordance with AvePoint’s Pri- vacy Policy, which can be accessed at xxxx://xxx.xxx- xxxxx.xxx/xxxxxxx/xxxxxxx-xxxxxx, as amended from time to time. Any Personal Data received or collected by AvePoint or its Affiliates will further be processed in accordance with applicable data protection laws. Where the Personal Data is that of a third party, Cus- tomer certifies that it has obtained that data pursuant to applicable data protection laws and has obtained all necessary authorisations and consents with respect to such information. AvePoint shall maintain administra- tive, physical, and technical safeguards for protection of the security, confidentiality and integrity of Cus- tomer Data and Business Contact Information, includ- ing, but not limited to measures for preventing access, use, modification or disclosure of Customer Data or Business Contact Information except (a) to provide the SaaS Solutions and prevent or address service or tech- nical problems; (b) as compelled by law; or (c) as ex- pressly permitted by Customer in writing. Such specific safeguards shall be as set forth in the Documentation. When providing Customer Data or Business Contact Information, Customer shall not under any circum- stances provide Personal Data to AvePoint for the pro- cessing of such data on behalf of Customer, as defined in Article 28.1 GDPR, unless agreed otherwise by way of a separate written agreement between the Parties. All Customer Data passing through SaaS Solutions is stored by AvePoint in a Customer-selected data centre. If there is a geographic region indicated on the appli- cable Order or the website where Customer registers 2.

DATA PRIVACY Security. AvePoint shall use commercially reasonable rea- sonable technical and organisational measures de- signed designed to prevent unauthorised access, use, alteration, or disclosure disclo- sure of the Solutions or Customer Data, as fur- ther described further de- scribed in AvePoint’s then-current DPIS Policy. Customer Data. All Personal Data received or collected by AvePoint in connection with the perfor- xxxxx performance of this Agreement (including its amendments) will be processed pro- cessed in accordance with AvePoint’s Pri- vacy Privacy Policy, which can be accessed at xxxx://xxx.xxx- xxxxx.xxx/xxxxxxx/xxxxxxx-xxxxxxxxxx://xxx.xxxxxxxx.xxx/com- pany/privacy-policy, as amended from time to time. Any Personal Data received or collected by AvePoint or its Affiliates Af- filiates will further be processed in accordance with applicable appli- cable data protection laws. Where the Personal Data is that of a third party, Cus- tomer Customer certifies that it has obtained that data pursuant to applicable data protection laws and has obtained all necessary authorisations and consents with respect to such information. AvePoint shall maintain administra- tivead- ministrative, physical, and technical safeguards for protection protec- tion of the security, confidentiality and integrity of Cus- tomer Data and Business Contact Information, includ- ingincluding, but not limited to measures for preventing access, use, modification or disclosure of Customer Data or Business Contact Information except (a) to provide the SaaS Solutions Solu- tions and prevent or address service or tech- nical problemstechnical prob- lems; (b) as compelled by law; or (c) as ex- pressly expressly permitted by Customer in writing. Such specific safeguards shall be as set forth in the Documentation. When providing Customer Cus- tomer Data or Business Contact Information, Customer shall not under any circum- stances circumstances provide Personal Data to AvePoint for the pro- cessing processing of such data on behalf of Customer, as defined in Article 28.1 GDPR, unless agreed otherwise by way of a separate written agreement between be- tween the Parties. All Customer Data passing through SaaS Solutions is stored by AvePoint in a Customer-selected data centre. If there is a geographic region indicated on the appli- cable applicable Order or the website where Customer registers reg- isters for the SaaS Solutions, Customer Data and all oper- ations will reside and execute from that geographic re- gion's data centre, save for (temporary) emergency CONFIDENTIALITÉ DES DONNÉES Sécurité. AvePoint utilisera des mesures techniques et or- ganisationnelles commercialement raisonnables conçues pour empêcher l'accès, l'utilisation, l'altération ou la divul- gation non autorisés des Solutions ou des Données du Client, comme décrit plus en détail dans la Politique DPIS d'AvePoint alors en vigueur. Données du client. Toutes les Données Personnelles re- çues ou collectées par AvePoint dans le cadre de l'exécu- tion du présent Contrat (y compris ses modifications) se- ront traitées conformément à la Politique de Confidentialité d'AvePoint, qui peut être consultée à l'adresse xxxx://xxx.xxxxxxxx.xxx/company/privacy-po- licy , telle que modifiée de temps à autre. Toute Donnée Personnelle reçue ou collectée par AvePoint ou ses Affi- liées sera en outre traitée conformément aux lois appli- cables en matière de protection des données. Lorsque les Données Personnelles sont celles d'un tiers, le Client cer- tifie qu'il a obtenu ces données conformément aux lois ap- plicables en matière de protection des données et qu'il a obtenu toutes les autorisations et tous les consentements nécessaires concernant ces informations. AvePoint main- tiendra des garanties administratives, physiques et tech- niques pour la protection de la sécurité, de la confidentia- lité et de l'intégrité des Données du Client et des Informations d’Affaires, y compris, mais sans s'y limiter, des mesures pour empêcher l'accès, l'utilisation, la modi- fication ou la divulgation des Données du Client ou des Informations de Contact Commerciales, sauf (a) pour four- nir les Solutions SaaS et prévenir ou résoudre les pro- blèmes de service ou techniques ; (b) si contraint par la loi ; ou (c) avec l’autorisation expresse et écrite du Client. Ces mesures de protection spécifiques sont définies dans la documentation. Lorsqu'il fournit des Données du Client ou des Informations d’Affaires, le Client ne fournira en aucun cas des Données Personnelles à AvePoint pour le traite- ment de ces données au nom du Client, tel que défini à l'article 28.1 RGPD, sauf accord contraire par le biais d'un accord écrit distinct entre les Parties. Toutes les Données du Client passant par les Solutions SaaS sont stockées par AvePoint dans un centre de données sélectionné par le Client. S'il existe une région géographique indiquée sur la purposes. Customer acknowledges and to the extent nec- essary approves that information provided to AvePoint (other than Customer Data) may be stored and processed by AvePoint in the United States or in other countries. Rights in Customer Data. Customer is solely re- sponsible for the accuracy, content, and legality of all Cus- tomer Data. Customer represents and warrants to Ave- Point that (1) Customer will comply with all applicable laws in its use of the Solutions (including but not limited to, if applicable, GDPR and similar laws governing the protec- tion of personal data) and (2.) Customer has provided all disclosures and obtained all necessary rights, consents and permissions to collect, share and use Customer Data as contemplated in this Agreement (including granting AvePoint the rights herein) without violation or infringe- ment of (i) any third party intellectual property, publicity, privacy or other rights, (ii) any Laws, or (iii) any terms of service, privacy policies or other agreement governing Customer Properties or Customer’s accounts with third- parties. Customer grants to AvePoint and its Affiliates a non-exclusive, worldwide, limited-term license to use, store, host, copy, transmit, modify, create derivative works of, and display Customer Data and Business Contact Infor- mation solely as necessary for AvePoint to provide the So- lutions and/or Services as the case may be, in accordance with this Agreement. Subject to these limited licenses, AvePoint shall acquire no right, title, or interest from Cus- tomer under this Agreement in or to Customer Data or Business Contact Information. Customer grants AvePoint and its Affiliates a worldwide, perpetual, irrevocable, roy- alty-free license to use and incorporate into the Solutions or the Documentation any request, comments, sugges- tion, recommendation, correction, or other feedback pro- vided by Customer related to the Solutions (“Feedback”). AvePoint may freely use or exploit Feedback in connection with any of its products or services. Indemnification by Customer. Customer shall indemnify, defend and hold harmless AvePoint (including its Affiliates) from and against any and all third-party claims, costs, damages, losses, liabilities, judgments, set- tlements, and expenses (including reasonable attorneys’ fees and costs) arising out of or in connection with any Customer Materials, Customer Data, or breach or alleged breach by Customer of Section 2.3 (Rights in Customer Data). This indemnification obligation is subject to Cus- tomer receiving (i) prompt written notice of such claim; (ii) the exclusive right to control and direct the investigation, Commande applicable ou sur le site Internet où le Client s'inscrit aux Solutions SaaS, les Données du Client et toutes les opérations résideront et seront exécutées à par- tir du centre de données de cette région géographique, sauf à des fins d'urgence (temporaire). Le Client reconnaît et, dans la mesure nécessaire, approuve que les informa- tions fournies à AvePoint (autres que les Données du Client) peuvent être stockées et traitées par AvePoint aux États-Unis ou dans d'autres pays. Droits sur les Données du Client. Le Client est seul res- ponsable de l'exactitude, du contenu et de la légalité de toutes les Données du Client. Le Client déclare et garantit à AvePoint que (1) le Client se conformera à toutes les lois applicables dans son utilisation des Solutions (y compris, mais sans s'y limiter, le cas échéant, le RGPD et les lois si- milaires régissant la protection des données personnelles) et (2) le Client a fourni toutes les divulgations et obtenu tous les droits, consentements et autorisations nécessaires pour collecter, partager et utiliser les Données du Client comme envisagé dans le présent Contrat (y compris l'oc- troi à AvePoint des droits prévus par les présentes) sans violation ou infraction (i) de tout droit de propriété intel- lectuelle, de publicité, de confidentialité ou autre de tiers,