Joint Controllers. 18.23.1 Where the Parties include two or more Joint Controllers as identified in Annex 1 – Protection of Personal Data to Schedule 1 (Specification), those Parties shall comply with the terms outlined in Annex 2 – Joint Controller Agreement to Schedule 1 (Specification).
Joint Controllers. 2.1 The BID Company acknowledges that the Council is under no obligation to transfer any Personal Data to the BID Company. Any such transfers will be made by the Council as a good will gesture and in accordance Data Protection Legislation.
2.2 Each Party shall be responsible for its own obligations as a Controller under the Data Protection Legislation.
2.3 Where each Party perform or receive services under the Agreement each party shall be responsible and comply with the Data Protection Legislation
2.4 Each Party shall:
2.4.1 maintain its own records of processing under Article 30 of the GDPR;
2.4.2 be responsible for determining its data security obligations, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing of Personal Data, as well as the risks of varying likelihood and severity to the rights and freedoms of the DataSubjects;
2.4.3 implement appropriate Protective Measures to protect the Personal Data against unauthorised or unlawful Processing and accidental destruction or loss; and
2.4.4 ensure the protection of the rights of the Data Subject, in such a manner that the Processing will meet the requirements of the Data Protection Legislation where Personal Data have been transmitted by it, or while the Personal Data are in its possession or control.
2.5 When transferring Personal Data:
2.5.1 the Party transferring the Personal Data (the - Data Transferor) warrants and undertakes to the Party receiving the Personal Data (the Data Recipient) that such Personal Data have been collected, processed and transferred in accordance with the Data Protection Legislation, this paragraph 2, and any other laws applicable to the Data Transferor and to the Personal Data;
2.5.2 the Data Recipient warrants and undertakes to the Data Transferor that:
(a) it will process the Personal Data in accordance with the Data Protection Legislation;
(b) it has and will continue to have in place appropriate technical and organisational measures to protect the Personal Data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, and which provide a level of security appropriate to the risk represented by the processing and the nature of the data to be protected; and
(c) it has the legal authority to give the warranties and fulfil the undertakings set out in this Agreement; and
2.5.3 if the Data Recipient is in breach of any of its obligations under t...
Joint Controllers. 11.1. As at the date of the Agreement, the parties do not consider themselves to be joint controllers (that is, where two or more controllers jointly determine the purposes and means of processing) for the purpose of the processing activities referred to in this Addendum.
11.2. If and to the extent that the parties later determine that their arrangement has become one of joint controllers, they shall comply with the requirements set out in article 26 GDPR.
Joint Controllers. If and to the extent that the Parties jointly determine the purposes and means of processing of Personal Data, acting as “Joint Controllers” (Art. 26 GDPR), the Parties shall agree in writing on a Joint Controller agreement that determines their respective responsibilities for compliance under Applicable Laws on data protection and that shall apply in addition to the other provisions of this Article 8. In case of a Clinical Trial according to Article 7, MRK shall be responsible to provide all relevant information to patients and shall be responsible to handle any patient requests regarding the exercise of their data protection rights; ArcherDX shall assist MRK in handling and comply with legitimate requests of data subjects regarding their rights under Applicable Laws on data protection.
Joint Controllers. If and to the extent that the parties jointly determine the purposes and means of processing of Personal Data, acting as “Joint Controllers”, the parties shall agree in writing on a Joint Controller agreement that determines their respective responsibilities for compliance under applicable data protection legislation and that shall apply in addition to the other provisions of this Section.
Joint Controllers. Notwithstanding anything to the contrary herein, SureSmile and the Customer have agreed to be joint controllers, as defined in Article 26 of the GDPR, for the patient data used by the Customer for orthodontic treatment planning. This means that, for such personal data and for the purpose stated above only, SureSmile and the Customer jointly determine the purposes and means of processing and the below shall apply.
Joint Controllers. To the extent a Party is deemed to be a joint Controller with the other in relation to Personal Data, the Parties will be jointly responsible for the compliance obligations imposed on a Controller by the Data Protection Laws, and the Parties will co-operate to do all necessary things to enable performance of such compliance obligations.
Joint Controllers. To the extent the parties in the course of performing their obligations and exercising their rights under this Agreement are joint data controllers with respect to the processing of certain personal data each party shall: process such personal data in compliance with Data Protection Legislation and take all measures required of data controllers pursuant to Article 32 (Security of Processing) of the GDPR; provide reasonable assistance and cooperation to the other and to any supervisory authority in connection with any investigations, audits or enquiries made by the supervisory authority; where any data subject exercises any right(s) laid down in Part III (Rights of the data subject) of the GDPR promptly notify the other party to the extent that any action is required of, or information is required from, the other party for the fulfilment of such right(s); provide all cooperation and information reasonably requested by the other party: for the fulfilment of the other party’s obligation to respond to requests for exercising the data subject’s rights laid down in Part III (Rights of the data subject) of the GDPR; and regarding the investigation of any alleged or actual personal data breach and the fulfilment of any related notification obligations under the Data Protection Legislation, such cooperation shall include: (i) promptly informing each other if any personal data is lost or destroyed or becomes damaged, corrupted or unusable (and restoration of such data where necessary and appropriate to do so); (ii) cooperating (taking into account obligations under Data Protection Legislation) to determine whether there is a requirement to provide notice to data subjects and notification to the supervisory authority; and (iii) taking appropriate technical and organisational measures to integrate the necessary safeguards into the processing in order to meet the requirements of Part III of the GDPR and demonstrate that personal data is being treated in accordance with the Data Protection Legislation. In the event that a contributor asks Channel 4 to provide a copy of the Broadcast Programme(s) in which the contributor appears, the Producer shall provide Channel 4 with reasonable co-operation and assistance in respect of such request. PROCESSOR DATA PROTECTION ADDENDUM The processor warrants, undertakes and represents on an ongoing basis that, to the extent it processes any personal data as processor in connection with the Programme(s), the exploitation of the Programm...
Joint Controllers general powers and corporate governance arrangements The Parties collaboratively Process personal data in the exercise of their general powers. Processing to support the following activities: • The appointment of joint executive positions to the Board and at a senior level • Shared HR service; • Planning for operational management of integrated teams; • Line management of integrated teams; • The establishment of a shared secretariat for servicing boards and committees.
Joint Controllers. Notwithstanding Clause [21.5] the Parties acknowledge that they are joint Controllers for the purposes of the Data Protection Legislation in respect of [Insert scope of Personal Data which the purposes and means of the processing is determined by the both Parties] and Annex A to this Schedule shall apply.
