Instructions of the contracting authority. 3.1. The contractor undertakes to process personal data only on the documented instructions of the contracting authority and in accordance with agreed processing activities as defined in Annex 1 of this Agreement. The contractor will not process the personal data subject to this Agreement in a manner inconsistent with the instructions and provisions of this Agreement. 3.2. The contractor undertakes to process personal data in accordance with the documented instructions of the personal data controller, including for transfers of personal data to third countries or to international organisations, unless it is required under EU or Member State law. In this case, the processor informs the personal data controller of this legal obligation prior to processing unless the relevant law prohibits such information for important public interest reasons. 3.3. The contracting authority may unilaterally make limited changes to the instructions. The contracting authority undertakes to consult with the contractor before making significant changes to the instructions. Changes affecting the content of this Agreement must be agreed by the Parties. 3.4. The contractor undertakes to immediately notify the contracting authority if it considers that the instructions received (in whole or in part) constitute a violation of the Regulations or other provisions of EU law or Member State data protection law.
Appears in 5 contracts
Samples: Services Procurement Contract, Public Procurement Contract for Consultancy Services, Services Procurement Contract
Instructions of the contracting authority. 3.1. The contractor undertakes to process personal data only on the documented instructions of the contracting authority and in accordance with agreed processing activities as defined in Annex Annexe 1 of this Agreement. The contractor will not process the personal data subject to this Agreement in a manner inconsistent with the instructions and provisions of this Agreement.
3.2. The contractor undertakes to process personal data in accordance with the documented instructions of the personal data controller, including for transfers of personal data to third countries or to international organisations, unless it is required under EU or Member State law. In this case, the processor informs the personal data controller of this legal obligation prior to processing unless the relevant law prohibits such information for important public interest reasons.
3.3. The contracting authority may unilaterally make limited changes to the instructions. The contracting authority undertakes to consult with the contractor before making significant changes to the instructions. Changes affecting the content of this Agreement must be agreed by the Parties.
3.4. The contractor undertakes to immediately notify the contracting authority if it considers that the instructions received (in whole or in part) constitute a violation of the Regulations or other provisions of EU law or Member State data protection law.
Appears in 1 contract