Common use of PROCESSING AND PROTECTION OF PERSONAL DATA Clause in Contracts

PROCESSING AND PROTECTION OF PERSONAL DATA. 3.1. Each party shall Process Personal Data in compliance with applicable Data Protection Law, industry standards and its obligations herein. Without derogating from the general or specific terms herein, the Advertiser hereby warrants and confirms that as of May 25, 2018 it will be compliant with EU Data Protection Law. 3.2. In respect of the Processing of Personal Data by Advertiser in connection with the Advertiser Agreement where EU Data Protection Law applies, the Advertiser is responsible for and shall comply with applicable Data Protection Law and agrees that it shall: (a) treat all Company Data processed by it on behalf of the Company as confidential and ensure that persons authorized to Process the Personal Data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality; (b) cooperate as requested by the Company and implement appropriate technical and organizational measures to enable Company to comply with any exercise of rights by a Data Subject under applicable Data Protection Law in respect of Personal Data processed by Company under the Advertiser Agreement (including, without limitation, deletion of a Data Subject’s Personal Data); (c) not access or transfer outside the EEA any Personal Data without the prior written consent of the Company; (d) provide the Company with reasonable resources and assistance as are required by the Company pursuant to Articles 32 to 36 of the GDPR; (e) by Company’s sole disclosure, delete all the Company Data following the completion of the Processing, and delete existing copies unless European Union or Member State law requires storage of such; (f) make available to the Company at its request all information necessary to demonstrate compliance with the obligations herein and under Article 28 of the GDPR, including without limitation, provide the Company with a written description of the technical and organizational methods employed by Advertiser and its Sub- Processors (if any) for the Processing of Personal Data; and (g) immediately inform the Company if, in the its opinion, an instruction from the Company infringes applicable Data Protection Law.

PROCESSING AND PROTECTION OF PERSONAL DATA. 3.1. Each party shall Process Personal Data in compliance with applicable Data Protection Law, industry standards and its obligations herein. Without derogating from the general or specific terms herein, the Advertiser hereby warrants and confirms that as of May 25, 2018 it will be compliant with EU Data Protection Law. 3.2. In respect of the Processing of Personal Data by Advertiser in connection with the Advertiser Agreement where EU Data Protection Law applies, the Advertiser is responsible for and xxxxxx shall comply with applicable Data Protection Law and agrees that it shall: (a) treat all Company Data processed by it on behalf of the Company as confidential and ensure that persons authorized to Process the Personal Data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality; (b) cooperate as requested by the Company and implement appropriate technical and organizational measures to enable Company to comply with any exercise of rights by a Data Subject under applicable Data Protection Law in respect of Personal Data processed by Company under the Advertiser Agreement (including, without limitation, deletion of a Data Subject’s Personal Data); (c) not access or transfer outside the EEA any Personal Data without the prior written consent of the Company; (d) provide the Company with reasonable resources and assistance as are required by the Company pursuant to Articles 32 to 36 of the GDPR; (e) by Company’s sole disclosure, delete all the Company Data following the completion of the Processing, and delete existing copies unless European Union or Member State law requires storage MemberState lawrequiresstorage of such; (f) make available to the Company at Companyat its request all information necessary to demonstrate compliance with the obligations herein and under Article 28 of the GDPR, including without limitation, provide the Company with a written description of the technical and organizational methods employed by Advertiser and its Sub- Processors (if any) for the Processing of Personal Data; and (g) immediately inform the Company if, in the its opinion, an instruction from the Company infringes applicable Data Protection Law.