Common use of Disclosure of Personal Data Clause in Contracts

Disclosure of Personal Data. In case the Recipient wishes to obtain Data from the NFBC-study which falls into the category of Personal Data determined by the Provider the Recipient agrees as follows: 3.2.1 The Provider has originally determined the means and purposes of the collection of Data, thereby constituting the owner of the Data and original Controller of Personal Data. 3.2.2 Subject to the terms and conditions of this Agreement, the Provider shall hereby disclose Personal Data to the Recipient. 3.2.3 In the processing of Personal Data, the Recipient undertakes to comply with the current Data Protection Regulation and the official regulations issued thereunder. The Recipient warrants that it is familiar with the content of the Data Protection Regulation. Any conduct of the Recipient that is contrary to the Data Protection Regulation may be considered a material breach of contract. Upon receiving the Personal Data, Recipient shall constitute an independent Controller of the Personal Data. As an independent Controller, Recipient represents and warrants it shall process Personal Data pursuant to the Data Protection Regulation and undertake all rights and obligations relevant to a Controller. 3.2.4 Recipient shall, for its own part, ensure that Personal Data is processed in compliance with the Data Protection Regulation, as well as good data processing practices. 3.2.5 Recipient shall implement continuously appropriate technical and organisational measures to protect Personal Data as required by the applicable Data Protection Regulation. 3.2.6 The Provider may at any moment inform the Recipient of a Data Subject withdrawing their consent or exercising their rights as a Data Subject under the Data Protection Regulation. The Recipient shall perform all actions necessary in order to fulfil the rights of the Data Subject and comply with the Data Protection Regulation. 3.2.7 If Provider discloses Personal Data in pseudonymized form to Recipient, Provider shall have no obligation to disclose the pseudonymization key unless otherwise specified in this Agreement.