DATA PROTECTION PROVISIONS. The following constitutes the Data Protection Provisions:
DATA PROTECTION PROVISIONS. All information to be communicated to the participants in accordance with the provisions of the General Data Protection Regulation (GDPR) is provided by the Data Protection Declaration of the IMC Krems. This Data Protection Declaration can be found at xxxxx://xxx.xxx.xx.xx/en/data-protection/ and forms an integral part of this educational contract. In case the participant in connection with the course, a specific project or a scientific paper uses, stores or processes any personal data (videos, pictures or any other personal data) of third parties in any other way, the following regulations shall apply:
1) The participant shall keep confidential any data and processing results and shall use it solely in connection with and for the purpose of the academic activity, the data were committed for. She*he shall return the data exclusively to the IMC Krems and pass the data to third parties only upon written order or approval by the IMC Krems. Any use of the data to the participant’s own purposes shall also require such a written approval.
2) The participant declares that under no circumstances will she*he store, use, edit or transmit these data in any other way and particularly she*he will not pass the data to any unauthorized persons.
3) In case the participant stores the data on her*his own storage medium she*he declares to undertake sufficient security measures according to the General Data Protection Regulation and to prevent disorderly use of data and access by unauthorized persons.
4) The participant shall take care of the technical and organizational prerequisites to enable the IMC Krems to comply with the obligations according to the General Data Protection Regulation towards the data subject within the legal deadlines.
5) After completion of the project or the scientific paper, the data were committed for, the participant shall return any processing results and documents containing personal data to the IMC Krems or delete them as agreed to or carry on storing them and keeping them safe from unauthorized access upon the order of the IMC Krems. In any case, as soon as the data are no longer required to complete the academic activity they were committed for, they have to be deleted or returned by the p participant the IMC Krems without undue delay.
6) With regard to the use of the data that the IMC Krems has committed to the participant the IMC Krems reserves the constant right of inspection and supervision of all data processing facilities. The participan...
DATA PROTECTION PROVISIONS. 13.1 Within the framework of the Agreement, Customer, in its capacity of data controller, will be processing personal data of representatives or other identifiable contact persons within the Contractor’s organization, such as their name, title, address, telephone number, workplace facsim- ile number, e-mail address, medical data and time registration data.
13.2 This processing shall occur for the purposes of properly performing the Agreement and the obligations thereunder, for organizing and maintaining a proper supplier administration within the Customer, for protecting the safety and for contacting the Contractor in case of any problems or issues, for payment and handling of bills. Consequently, the legal grounds upon which this processing activity shall be based are, as the case may be, the consent of the natural persons whose data will be processed, the necessity for the performance of the Agreement and Customer’s legitimate interests in organizing and maintaining a proper supplier administration, protecting the safety and communicating with the Contractor.
13.3 The personal data of repre- sentatives or other identifiable con- tact persons within the Contractor’s organization may be shared with the following categories of recipients, some of which may be acting as data processor on behalf of the Customer: IT service providers, hosting providers, other entities within the Custom- er group, public authorities and legal and tax advisors, police and other suppliers for organization of a project. In case of transfers outside the European Union, the Customer shall ensure suitable safeguards via appropriate contractual clauses in accordance with applicable data protection legislation.
13.4 The personal data of repre- sentatives or other identifiable con- tact persons within the Contractor’s organization shall be stored for as long as necessary for the purposes described above, and in any event for a period of ten years as from the ter- mination of the Agreement, which correlates to the applicable statute of limitations.
13.5 In accordance with applicable data protection legislation and to the extent allowed thereunder, representatives or other identifiable con- tact persons within the Contractor’s organization of which Customer is processing personal data have the right to request access to and rectification or erasure of their personal data, to restricting of the processing, to object to the processing as well as the right to data portability via datap- xxxx...
DATA PROTECTION PROVISIONS i. BT, as the data controller for the purposes of the Data Protection Act, taking into account the contractual obligations imposed on the Supplier by the Contract and this Work Package Agreement, the technical and organisational security measures which are in place and the other circumstances relating to the Work Package Services confirms that it considers that an adequate level of protection for the Data and for the rights of data subjects is in place.
ii. The Supplier agrees to ensure that all such technical and organisational security measures as set out in Annex [B] are maintained throughout the duration of the term of the Contract and Work Package Agreement except as such arrangements are varied by agreement between the Parties. Accordingly, the Parties agree that any transfer of Data will be compliant with Data Protection Act.
iii. BT may suspend or terminate its consent and this Work Package for a serious breach or serious non-compliance with Data Protection legislation in connection with this consent. If either Party becomes aware of any breach of or non-compliance with the Data Protection legislation in connection with the Sub-Contracted Services that Party shall promptly inform the other Party and the Parties shall, as soon as reasonably practicable, conduct a review of the matter and implement any changes in processes or procedures established by the review ‘PORTIONS OF THIS EXHIBIT WERE OMITTED AND HAVE BEEN FILED SEPARATELY WITH THE SECRETARY OF THE COMMISSION PURSUANT TO AN APPLICATION FOR CONFIDENTIAL TREATMENT UNDER RULE 406 OF THE SECURITIES ACT; [***] DENOTES OMISSIONS.
DATA PROTECTION PROVISIONS. In this agreement, the following terms shall have the following meanings:
DATA PROTECTION PROVISIONS. 1.1 The Provider shall:
(a) Comply with all applicable data protection law.
(b) Maintain accountability documentation in relations to agreement data
(c) Do so for the purpose of meeting our obligations under the Terms and Conditions and Service Agreement, or where the law permits us to do so.
(d) Act in accordance with your instructions or requests regarding the processing of personal data.
(e) Take appropriate organisational and technical measures to protect personal data against unauthorised or unlawful processing, and accidental loss, destruction or damage. Those measures may take account of:
(f) The nature of the information and the harm which could arise from such processing, loss, destruction or damage; and
(g) The technology available; and
(h) The proportionality of taking those measures; and
(i) The cost of implementation.
1.2 We will not allow personal data to be transferred out of, or processed outside, the UK unless we have taken such measures as are necessary to ensure the transfer is compliant with all applicable data protection law.
1.3 We will not pass this personal data to any third party unless there is a legal or statutory obligation to do so, or:
(a) We have your permission; or
(b) We have entered into a written contract with a third party and they agree to meet obligations that are equivalent to those set out in this clause; or
(c) Where necessary in relation to, as part of, mergers and acquisitions.
1.4 The customer acknowledges we have general consent to appoint sub-processors in connection with the services provided. We will only engage sub-processors where we have a written contract in place that imposes upon the sub-processor data protection obligations to the standard requried by applicable data protection laws
1.5 We will provide reasonable and timely assistance to assist you in dealing with data protection related requests relating to the data we hold, including to respond to:
(a) Requests from a data subject to exercise their rights under applicable data protection law.
(b) Not provide any information to the data subject relating to their rights without your prior written authorization.
(c) Any other correspondence, enquiry or complaint received from a data subject, regulator or other third party in connection with the data we hold.
1.6 We will provide reasonable assistance, with data protection impact assessments.
1.7 We will inform you of data breaches relating to your data without undue delay. Providing information on the na...
DATA PROTECTION PROVISIONS. 13.1 Within the framework of the Agreement, Customer, in its capacity of data controller, will be processing personal data of representatives or other identifiable contact persons within the Contractor’s organization, such as their name, title, address, telephone number, workplace facsim- ile number, e-mail address, medical data and time registration data.
13.2 This processing shall occur for the purposes of properly perform- ing the Agreement and the obliga- tions thereunder, for organizing and maintaining a proper supplier admin- istration within the Customer, for protecting the safety and for contact- ing the Contractor in case of any prob- lems or issues, for payment and han- dling of bills. Consequently, the legal grounds upon which this processing activity shall be based are, as the case may be, the consent of the natural persons whose data will be processed, the necessity for the performance of the Agreement and Customer’s legit- imate interests in organizing and maintaining a proper supplier admin- istration, protecting the safety and communicating with the Contractor.
13.3 The personal data of repre- sentatives or other identifiable con- tact persons within the Contractor’s organization may be shared with the following categories of recipients, some of which may be acting as data processor on behalf of the Customer: IT service providers, hosting provid- ers, other entities within the Custom- er group, public authorities and legal and tax advisors, police and other suppliers for organization of a pro- ject. In case of transfers outside the European Union, the Customer shall ensure suitable safeguards via appro- priate contractual clauses in accord- ance with applicable data protection legislation.
13.4 The personal data of repre- sentatives or other identifiable con- tact persons within the Contractor’s organization shall be stored for as long as necessary for the purposes described above, and in any event for a period of ten years as from the ter- mination of the Agreement, which correlates to the applicable statute of limitations.
13.5 In accordance with applicable data protection legislation and to the extent allowed thereunder, repre- sentatives or other identifiable con- tact persons within the Contractor’s organization of which Customer is processing personal data have the right to request access to and rectifi- cation or erasure of their personal data, to restricting of the processing, to object to the processing as well as the right to data...
DATA PROTECTION PROVISIONS. 1.1 The Parties recognise that each Party may receive Personal Data that comes into its possession as a result of or in connection with its performance of its obligations under this Agreement and that such must be in accordance with all applicable Data Protection Legislation.
1.2 This Schedule 1 sets out the framework for the sharing of Personal Data between the Parties as data Controllers. Each party acknowledges that one party (the Data Discloser) will regularly disclose to the other party Personal Data collected by the Data Discloser for the Purpose of the Services.
1.3 Each Party shall comply with all the obligations imposed on a Controller under the Data Protection Legislation and this Agreement. In particular each Party agrees to (as appropriate):
(a) ensure that it has all necessary notices and consents in place to enable lawful transfer of the Data for the purpose of the Services;
(b) process the Data only for the purpose of the Services;
(c) ensure that it has in place appropriate technical and organisational measures to protect against unauthorised or unlawful processing of the Data and against accidental loss or destruction of, or damage to the Data;
(d) ensure that all persons engaged by that Party to Process the Data are subject to written contractual obligations concerning the Data (including obligations of confidentiality);
(e) not transfer any or all of the Data received from the other Party outside the EEA unless the Party purporting to make the transfer:
(i) complies with the provisions of Article 26 of the GDPR (in the event the third party is a joint controller); and
(ii) ensures that (i) the transfer is to a country approved by the European Commission as providing adequate protection pursuant to Article 45 GDPR;
DATA PROTECTION PROVISIONS. A. Restriction on Use, Duplication, Redisclosure, Retention, and Destruction of Data
1. The STC may not use the information contained in SSA’s data files for any purpose, in any way, nor expand access to any other persons or parties without an approved modification to this agreement.
2. The STC will not use, duplicate, or redisclose the SSA data disclosed under this agreement except as provided in this agreement or as set forth in a separate State Agency IEA between SSA and the STC. STC personnel who access, use, duplicate, or redisclose the data obtained pursuant to this agreement in a manner or for a purpose not authorized by this agreement may be subject to civil and criminal sanctions under applicable Federal statutes.
3. The STC agrees to transmit the data only between SSA and the authorized State agencies listed in Section III.
4. SSA data files provided to the STC under this agreement remain the property of SSA. The STC will retain SSA data files only for the period of time required for successful transfer/transmission to the State agencies and will then destroy them.
DATA PROTECTION PROVISIONS. 2.1 To the extent that a term of this Agreement requires the performance by a party of an obligation “in accordance with Data Protection Law” (or similar), unless otherwise expressly agreed in this Agreement, this requires performance in accordance with the relevant requirements of such Data Protection Law as is in force and applicable at the time of performance (if any).
2.2 the parties agree that, for the customer Personal Data, the customer shall be the Data Controller and 2sms shall be the Data Processor.
2.3 the customer shall comply with all Data Protection Law in respect of the performance of its obligations under this Agreement.
2.4 2sms represents, warrants and undertakes that it has complied and shall continue to comply with Data Protection Law in connection with the processing of the customer Personal Data, the Services and the exercise and performance of its rights and obligations under this Agreement. Doc Number 0-O-006 Issue No./Date v1.4 13-02-2020 Classification SEC 1
2.5 the Processing to be carried out by 2sms under this Agreement shall comprise the Processing set out in Schedule 1 (Data Processing Details), as updated from time to time by the written agreement of the parties.
2.6 To the extent that 2sms or any 2sms Personnel Processes any the customer Personal Data 2sms:
2.6.1 shall not do or permit anything to be done which might cause the customer in any way to be in breach of the Data Protection Law;
2.6.2 unless required to do otherwise by Laws and Regulations shall (and shall ensure that 2sms Personnel shall) Process the customer Personal Data only for the purposes of complying with 2sms’s obligations under this Agreement, and only on and in accordance with the customer's documented instructions as set out in this Agreement (including Schedule 1 (Data Processing Details)) as updated from time to time by the written agreement of the parties (“Processing Instructions”);
2.6.3 unless prohibited by Laws and Regulations on important grounds of public interest, shall notify the customer if Laws and Regulations requires it to Process the customer Personal Data other than in accordance with the Processing Instructions (such notification to be made before 2sms Processes the customer Personal Data); and
2.6.4 shall immediately inform the customer in writing if, in 2sms’s reasonable opinion, a Processing Instruction infringes Data Protection Law and explain the reasons for its opinion.
2.7 2sms shall implement and maintain, at its cost and exp...
