DATA PROCESSING TERMS. 2.1 In relation to the Processing of any Personal Data in the User Data, the parties agree that the Client and/or its user(s) is/are the Data Controller and the Supplier is the Data Processor.
2.2 This Schedule 4 sets out the subject matter, duration, nature and purpose of the processing by the Supplier, as well as the types and categories of Personal Data and the obligations and rights of the Client.
2.3 The Supplier shall in respect of such Personal Data:
(i) process that Personal Data only on the documented written instructions of the Client unless the Supplier is required by Applicable Laws to otherwise process that Personal Data. Where the Supplier is relying on Applicable Laws as the basis for processing Personal Data, the Supplier shall promptly notify the Client of this before performing the processing required by the Applicable Laws unless those Applicable Laws prohibit the Supplier from notifying the Client;
(ii) ensure that it has in place appropriate technical and organisational measures, reviewed and approved by the Client, to protect against unauthorised or unlawful processing of Personal Data and against accidental loss or destruction of, or damage to, Personal Data, appropriate to the harm that might result from the unauthorised or unlawful processing or accidental loss, destruction or damage and the nature of the Personal Data to be protected, having regard to the state of technological development and the cost of implementing any measures;
(iii) ensure that all personnel who have access to and/or process Personal Data are obliged to keep the Personal Data confidential;
(iv) not transfer any Personal Data outside of the European Economic Area unless the prior written consent of the Client has been obtained and the Client has provided appropriate safeguards in relation to the transfer;
(v) assist the Client, at the Client’s cost, in responding to any request from a Data Subject and in ensuring compliance with its obligations under the Data Protection Legislation with respect to security, breach, notifications, impact assessments and consultations with supervisory authorities or regulators;
(vi) notify the Client without undue delay on becoming aware of a Personal Data breach;
(vii) at the written direction of the Client, delete or return Personal Data and copies thereof to the Client on termination of the Contract unless required by Applicable Laws to store the Personal Data; and
(viii) maintain complete and accurate records and information...
DATA PROCESSING TERMS. For the purposes of the Data Protection Legislation, the Sponsor is the Controller, the Participating Site is the Sponsor's Processor and the PIC is the Sub-Processor of the Participating Site in relation to all Processing of Personal Data that is Processed for the purpose of this Study and for any future research use under the Controllership of the Sponsor, that would not have taken place but for this Agreement regardless where that Processing takes place. The Parties acknowledge that whereas the Sponsor is the Controller in accordance with Clause 3.2, the PIC is the Controller of the Personal Data collected for the purpose of providing clinical care to the Participants. This Personal Data may be the same Personal Data, collected transparently and processed for research and for care purposes under the separate Controllerships of the Sponsor and PIC. Where the PIC is the Participating Site's Sub-Processor and thus where the Processing is undertaken by the PIC for the purposes of the Study, Clauses 3.5 to 3.9 below will apply. For the avoidance of doubt, such Clauses do not apply where the PIC is Processing the Participant Personal Data as a Controller. The PIC agrees only to Process Personal Data for and on behalf of the Participating Site in accordance with the instructions of the Participating Site or Sponsor and for the purpose of the Study and to ensure the Sponsor’s and Participating Site’s compliance with the Data Protection Legislation; The PIC agrees to comply with the obligations applicable to Processors described by Article 28 GDPR including, but not limited to, the following: to implement and maintain appropriate technical and organisational security measures sufficient to comply at least with the obligations imposed on the Controller by Article 28(1); to not engage another Processor without the prior written authorisation of the Sponsor (Article 28(2)); to Process the Personal Data only on documented instructions from the Participating Site or Sponsor unless required to do otherwise by legislation, in which case the PIC shall notify the Participating Site before Processing, or as soon as possible after Processing if legislation requires that the Processing occurs immediately, unless legislation prohibits such notification on important grounds of public interest (Article 28(3a)).; to ensure that personnel authorised to Process Personal Data are under confidentiality obligations (Article 28(3b)); to take all measures required by Article 32 GDPR i...
DATA PROCESSING TERMS. For the duration of the Agreement and in the course of providing the Services to Customer pursuant to the Agreement, Xactly may Process Personal Data on behalf of Customer. Xactly and Customer each agree to comply with the following provisions with respect to any Personal Data submitted by or on behalf of Customer to the Services.
DATA PROCESSING TERMS. This DPA applies where Cloudflare processes Personal Data as a Processor (or sub-Processor as applicable) on behalf of Customer to provide the Services and such Personal Data is subject to Applicable Data Protection Laws (as defined below). The parties have agreed to enter into this DPA in order to ensure that appropriate safeguards are in place to protect such Personal Data in accordance with Applicable Data Protection Laws. Accordingly, Cloudflare agrees to comply with the following provisions with respect to any Personal Data that it processes as a Processor (or sub-Processor as applicable) on behalf of Customer.
DATA PROCESSING TERMS. In the course of providing the Cloudinary's image and video management service ("Service") to Customer pursuant to the Subscription Agreement, Cloudinary may Process Personal Data on behalf of Customer. The parties agree to comply with the following provisions with respect to Personal Data Processed by Cloudinary as part of the Service for Customer.
DATA PROCESSING TERMS. In the course of providing the Service (defined in the Agreement) to You pursuant to the Agreement, Conga may Process Personal Data on behalf of You. Conga agrees to comply with the following provisions with respect to any Personal Data submitted by or for You to the Service or collected and Processed by or for You using the Service.
DATA PROCESSING TERMS. 2.1 In the course of providing the Services and/or Products to the Controller pursuant to the Principal Agreement, the Processor may process Controller personal data on behalf of the Controller as per the terms of this Addendum. The Processor agrees to comply with the following provisions with respect to any Controller personal data.
2.2 To the extent required by applicable Data Protection Laws, the Processor shall obtain and maintain all necessary licenses, authorizations and permits necessary to process personal data including personal data mentioned in Annex 1. The Processor shall maintain all the technical and organizational measures to comply with the requirements set forth in the Addendum and its Annexes.
DATA PROCESSING TERMS. Customer and Flipnode hereby agree to the following provisions with respect to any Personal Data Customer processed by Flipnode in relation to the provision of the Services under the Agreement.
DATA PROCESSING TERMS. In the course of providing the Services to Customer pursuant to the Agreement, Salesloft may Process Personal Data on behalf of Customer and each party agrees to comply with the following provisions with respect to any Personal Data.
DATA PROCESSING TERMS. The Parties agree as follows:
