Details of Data Processing (a) Subject matter: The subject matter of the data processing under this DPA is the Customer Data.
Personal Data Processing 2.1 The Processor shall process Personal Data only on the basis of corresponding recorded orders from the Controller.
2.2 By way of exception, in particular in urgent cases, processing orders from the Data Controller may also be made orally. In this case, the Data Controller shall confirm as soon as possible and in writing, by any appropriate means, the instructions given orally.
2.3 Where the processing concerns the transmission of Personal Data to a third country outside the European Union or to an international organization, the Data Processor shall also comply with the relevant instructions of the Data Controller, unless different legal requirements exist under European Union laws or the laws of the Member State to which the Data Processor is subject. In such a case, the Data Processor shall inform the Data Controller before processing of the legal requirement in question, unless the said law prohibits this kind of information for reasons of substantial public interest.
2.4 The transmission of Personal Data to a third country outside the European Union is prohibited unless the Data Controller has given prior explicit approval to that end, and one of the following conditions is met: • the European Commission has resolved that an adequate level of protection of personal data is ensured in the country the Personal Data is to be transmitted; • the transmission is to be made to the U.S.A.; and the recipient of the Personal Data has acceded to and abides by the Privacy Shield Framework; • the transmission will be governed by the standard data protection clauses issued by the European Commission.
2.5 The Data Processor shall inform the Data Controller immediately upon receipt of the order or as soon as possible if he / she determines that the content of a particular processing order violates the Regulation and / or national law and / or the law of another Member State of the European Union (EU), and / or other provisions of EU law on the protection of Personal Data.
2.6 The Data Processor acknowledges that the Data Controller has full control over her Personal Data and determines any particular feature of the processing to which the Personal Data will be submitted. If the Data Processor ignores the instructions of the Data Controller and determines alone the scope, the means and generally any other matter concerning the processing of Personal Data, she shall render herself the Data Controller for the purposes of implementing the Regulation and the legal framework on the protection of Personal Data. The practical consequence of this is that, in addition to the full responsibility of the Processor towards the Controller, she shall carry the same level of responsibility vis-à-vis the independent supervisory authority (and any other competent state authority) as well as the Natural Persons - Data Subjects of the data being processed.
Data Processing In this clause:
Retention of Data With regard to business transactions covered by this Agreement, Licensee must retain any records for a period of ten years starting on 1th of January of the year following the year during which the data were transmitted or otherwise transferred, or for the minimum period prescribed by applicable law, whichever is longer. In addition, Licensee must maintain current, complete and accurate reports on all of SAP’s Confidential Information in its possession or in the possession of its representatives.
Data Processing Agreement The Data Processing Agreement, including the Approved Data Transfer Mechanisms (as defined in the Data Processing Agreement) that apply to your use of the Services and transfer of Personal Data, is incorporated into this Agreement by this reference. Each party will comply with the terms of the Data Processing Agreement and will train its employees on DP Law.
Processing of Customer Personal Data 3.1 UKG will:
3.1.1 comply with all applicable Data Protection Laws in the Processing of Customer Personal Data; and
3.1.2 not Process Customer Personal Data other than for the purpose, and in accordance with, the relevant Customer’s instructions as documented in the Agreement and this DPA, unless Processing is required by the Data Protection Laws to which the relevant UKG Processor is subject, in which case UKG to the extent permitted by the Data Protection Laws, will inform Customer of that legal requirement before the Processing of that Customer Personal Data.
3.2 Customer hereby:
3.2.1 instructs UKG (and authorizes UKG to instruct each Subprocessor) to: (a) Process Customer Personal Data; and (b) in particular, transfer Customer Personal Data to any country or territory subject to the provisions of this DPA, in each case as reasonably necessary for the provision of the Services and consistent with the Agreement.
3.2.2 warrants and represents that it is and will at all relevant times remain duly and effectively authorized to give the instructions set out in Section 3.2.1 on behalf of each relevant Customer Affiliate; and
3.2.3 warrants and represents that it has all necessary rights in relation to the Customer Personal Data and/or has collected all necessary consents from Data Subjects to Process Customer Personal Data to the extent required by Applicable Law.
3.3 Schedule 1 to this DPA sets out certain information regarding UKG’s Processing of Customer Personal Data as required by Article 28(3) of the GDPR (and equivalent requirements of other Data Protection Laws).
Description of Administration Services on a Continuous Basis (a) PNC will perform the following administration services with respect to each Portfolio:
(i) Prepare quarterly broker security transactions summaries;
(ii) Prepare monthly security transaction listings;
(iii) Supply, in the form requested, various customary Portfolio and Fund statistical data on an ongoing basis;
(iv) Prepare and ensure the filing of the Funds’ annual and semi-annual reports with the SEC on Forms N-SAR and N-CSR and the Fund’s quarterly reports with the SEC on Form N-Q;
(v) If mutually agreed by PNC and VP Distributors in writing, prepare (or assist in the preparation of) and ensure the filing of (or coordinate filing of, as may be mutually agreed) such other reports with the SEC as may be required by the SEC and that would be primarily fulfilled using books and records maintained by PNC under the terms of this Agreement;
(vi) Assist in the preparation of registration statements and other filings relating to the registration of Shares;
(vii) Monitor each Portfolio’s status as a regulated investment company under Sub-chapter M of the Internal Revenue Code of 1986, as amended (“Sub-Chapter M”);
(viii) Coordinate contractual relationships and communications between the Funds and their contractual service providers;
(ix) Prepare expense budgets, accrual review and expense reports as needed;
(x) Provide read-only on-line access to accounting system as requested;
(xi) Provide electronic transmissions of holdings, transactions, security master, general ledger, NAV, security pricing data, and cash activity as specified;
(xii) Coordinate printing and mailing of annual and semi-annual financial statements;
(xiii) Prepare reports for Fund Boards and attend Board meetings when and as requested;
(xiv) Prepare, execute, and file each Portfolio’s Federal and state tax returns, including closed funds, and appropriate extensions after review and approval by the Fund’s independent registered public accounting firm;
(xv) Prepare, execute, and file each Portfolio’s federal excise returns (Form 8613) after review and approval by the Fund’s independent registered public accounting firm;
(xvi) Prepare annual tax provisions and financial tax disclosures;
(xvii) Prepare tax cost for semi-annual and Form N-Q filings updated for current year-to-date wash sales and prior year known Schedule M adjustments;
(xviii) Prepare dividend calculations, including accompanying analysis and earnings summary in accordance with applicable policy (as such policy is provided in writing by VP Distributors to PNC), and maintain dividend history;
(xix) Prepare required disclosures for shareholder reporting, including Form 1099-DIV reporting and supporting materials such as QDI, DRD, income from U.S. Obligations, income from State obligations, income from AMT obligations, tax-exempt income, and Florida intangibles;
(xx) Monitor and propose procedures as needed for tax considerations in the following areas: corporate actions, consent income, bad debt/restructurings, new instruments, premium amortization, and legislation and industry developments on an ad hoc basis; and
(xxi) Prepare and deliver, to the extent available to PNC, survey information when and in the form requested.
Detailed Description of Services / Statement of Work Describe fully the services that Contractor will provide, or add and attach Exhibit B to this Agreement.
Description of Goods or Services and Additional Terms and Conditions The Contractor shall perform as set forth in Exhibit A. For purposes of this Contract, to perform and the performance in Exhibit A is referred to as “Perform” and the “Performance.”
Protection of Customer Data The Supplier shall not delete or remove any proprietary notices contained within or relating to the Customer Data. The Supplier shall not store, copy, disclose, or use the Customer Data except as necessary for the performance by the Supplier of its obligations under this Call Off Contract or as otherwise Approved by the Customer. To the extent that the Customer Data is held and/or Processed by the Supplier, the Supplier shall supply that Customer Data to the Customer as requested by the Customer and in the format (if any) specified by the Customer in the Call Off Order Form and, in any event, as specified by the Customer from time to time in writing. The Supplier shall take responsibility for preserving the integrity of Customer Data and preventing the corruption or loss of Customer Data. The Supplier shall perform secure back-ups of all Customer Data and shall ensure that up-to-date back-ups are stored off-site at an Approved location in accordance with any BCDR Plan or otherwise. The Supplier shall ensure that such back-ups are available to the Customer (or to such other person as the Customer may direct) at all times upon request and are delivered to the Customer at no less than six (6) Monthly intervals (or such other intervals as may be agreed in writing between the Parties). The Supplier shall ensure that any system on which the Supplier holds any Customer Data, including back-up data, is a secure system that complies with the Security Policy and the Security Management Plan (if any). If at any time the Supplier suspects or has reason to believe that the Customer Data is corrupted, lost or sufficiently degraded in any way for any reason, then the Supplier shall notify the Customer immediately and inform the Customer of the remedial action the Supplier proposes to take. If the Customer Data is corrupted, lost or sufficiently degraded as a result of a Default so as to be unusable, the Supplier may: require the Supplier (at the Supplier's expense) to restore or procure the restoration of Customer Data to the extent and in accordance with the requirements specified in Call Off Schedule 8 (Business Continuity and Disaster Recovery) or as otherwise required by the Customer, and the Supplier shall do so as soon as practicable but not later than five (5) Working Days from the date of receipt of the Customer’s notice; and/or itself restore or procure the restoration of Customer Data, and shall be repaid by the Supplier any reasonable expenses incurred in doing so to the extent and in accordance with the requirements specified in Call Off Schedule 8 (Business Continuity and Disaster Recovery) or as otherwise required by the Customer.
