Common use of Personal data breaches’ notification Clause in Contracts

Personal data breaches’ notification. TEHTRIS shall notify the data controller of any breach of the personal data as soon as possible by means of a signed email. As an exception to the above, if TEHTRIS is unable to provide all the information available to it at the same time, the information may be provided in a staggered manner without undue delay. This notification shall be accompanied by any useful documentation to enable the data controller, if necessary, to notify the breach to the competent supervisory authority within seventy-two (72) hours at the latest after becoming aware of it, unless the breach in question is not likely to give rise to a risk to the rights and freedoms of the data subjects. In general, it is the responsibility of the data controller to communicate directly to the data subjects the violation of the personal Data, when it is likely to generate a high risk for the rights and freedoms of the data subjects. TEHTRIS undertakes to carry out any useful investigation into breaches of the aforementioned protection rules and/or any threats in order to remedy such breaches and/or threats and prevent their recurrence in the future. The relevant documentation will be provided to the data controller by means of a written report by TEHTRIS consisting of: - The nature of the failures to comply with the rules for the protection of personal data as defined in the Contract, - A description of the corrective actions taken or proposed to be taken by TEHTRIS to remedy the deficiencies identified, or where appropriate, measures to mitigate any adverse consequences, - The name and contact details of the Data Protection Officer or other point of contact from whom further information can be obtained. TEHTRIS is aware that any failure to comply with the rules for the protection of personal data may impose obligations on the data controller, in particular with regard to notification of data subjects and the authorities.

Personal data breaches’ notification. TEHTRIS shall notify the data controller of any breach of the personal data as soon as possible by means of a signed email. As an exception to the above, if TEHTRIS is unable to provide all the information available to it at the same time, the information may be provided in a staggered manner without undue delay. This notification shall be accompanied by any useful documentation to enable the data controller, if necessary, to notify the breach to the competent supervisory authority within seventy-two (72) hours at the latest after becoming aware of it, unless the breach in question is not likely to give rise to a risk to the rights and freedoms of the data subjects. In general, it is the responsibility of the data controller to communicate directly to the data subjects the violation of the personal Data, when it is likely to generate a high risk for the rights and freedoms of the data subjects. TEHTRIS undertakes to carry out any useful investigation into breaches of the aforementioned protection rules and/or any threats in order to remedy such breaches and/or threats and prevent their recurrence in the future. The relevant documentation will be provided to the data controller by means of a written report by TEHTRIS consisting of: - The nature of the failures to comply with the rules for the protection of personal data as defined in the ContractAgreement, - A description of the corrective actions taken or proposed to be taken by TEHTRIS to remedy the deficiencies identified, or where appropriate, measures to mitigate any adverse consequences, - The name and contact details of the Data Protection Officer or other point of contact from whom further information can be obtained. TEHTRIS is aware that any failure to comply with the rules for the protection of personal data may impose obligations on the data controller, in particular with regard to notification of data subjects and the authorities.