Common use of Personal Data: Processor Obligations Clause in Contracts

Personal Data: Processor Obligations. 3DS, acting as Processor, will, collect, store, and Process the Personal Data in accordance with this Agreement, including the Data Processing Exhibit published in the 3DS Website Terms. If and as required by Applicable Data Protection Legislation, 3DS will: (i) for the duration of use of the Online Services, Process Personal Data provided by Customer in accordance with this Agreement and Customer’s reasonable written instructions, which in all circumstances shall be consistent with this Agreement; (ii) require that the persons who are authorized to Process Personal Data provided by Customer have a need-to-know and are bound by an appropriate obligation of confidentiality; (iii) reasonably assist Customer in complying with its obligations as Controller, taking into account the nature of Processing as described in the Agreement; (iv) reasonably assist Customer with fulfilling its obligations with regards to responding to requests from Data Subjects to exercise their rights under Applicable Data Protection Legislation in a manner consistent with the use of the Online Services and 3DS’s role as Processor; (v) make available to Customer the necessary information in 3DS’s possession to demonstrate Customer’s compliance with its obligations provided for in the Applicable Data Protection Legislation and reflected in this section; and (vi) upon termination or expiration of the Agreement, delete or return Personal Data provided by Customer to Customer, at Customer’s option, and delete all existing copies, in accordance with the terms of this Agreement, except where applicable law requires retention of Personal Data or where retention of Personal Data is necessary for evidentiary purposes during the applicable statute of limitations.