Processing as Data Processor Clause Samples
Processing as Data Processor a. Data Processor To the extent Palo Alto Networks processes personal data on behalf of End User as a processor as defined by EU data protection law, it shall do so only on instructions from End User pursuant to this Agreement and as permitted by applicable law.
Processing as Data Processor a. Data Processor To the extent Palo Alto Networks processes personal data on behalf of Customer as a processor as defined by EU data protection law, it shall do so only on instructions from Customer pursuant to this Agreement and as permitted by applicable law.
b. Confidentiality of Personal Data Palo Alto Networks will ensure that personnel it authorizes to process personal data have committed themselves to confidentiality or are under appropriate statutory obligation of confidentiality.
c. Sub-Processors Customer authorizes Palo Alto Networks to engage sub-processors, as described in the applicable Product documentation for the relevant Product, to process personal data. In the event Palo Alto Networks engages any new sub-processor it will:
i. update the applicable documentation;
ii. notify Customerin writing (subject to Customer having opted in to receive compliance notifications) of such change to give Customer the opportunity to object to such sub-processing;
iii. impose appropriate contractual obligations upon the sub-processor that are no less protective than this Section 13 and Section 12 (and if applicable the BAA); and
iv. remain responsible for the sub-processor’s compliance with this Agreement and for any acts or omissions of the sub-processor that cause Palo Alto Networks to breach any of its obligations under this Agreement. If Customer objects to a new sub-processor, it must do so in writing within fifteen (15) days of such update described in clause (i) or if applicable such written notice described in clause (ii) and Palo Alto Networks will then endeavor to offer alternate options for the delivery of Products that do not involve the new sub-processor without prejudice to any of Customer’s termination rights.
Processing as Data Processor a. To the extent Palo Alto Networks processes Personal Data on behalf of End User as a processor (as defined in the GDPR), Palo Alto Networks shall do so only on documented instructions from End User pursuant to this DPA and the Agreement, to operate Palo Alto Networks Products, and as permitted or required by applicable law. In the event Palo Alto Networks processes Personal Data for purposes other than the above, it shall be responsible as data controller as defined in the GDPR.
b. In the event Palo Alto Networks is legally required to process End User’s Personal Data, Palo Alto Networks will carry out such processing and notify End User of such legal requirement, giving End User the ability to issue revised instructions or to cease using the Products. Such notification will not be given if prohibited by EU or Member State law.
c. Palo Alto Networks will process End User Personal Data in accordance with applicable Data Protection Laws and will make available upon request to End User the information necessary to demonstrate compliance with the obligations laid down in Article 28 of the GDPR, insofar as such information is not confidential.
d. Palo Alto Networks shall provide reasonable assistance to End User to comply with its obligations with regard to data subject rights under applicable Data Protection Laws, as appropriate, taking into account the nature of the data processing and the information available to Palo Alto Networks. If Palo Alto Networks or any sub-processor receives a request or a complaint from a data subject or its representative, including requests regarding the data subject’s rights under applicable Data Protection Laws, Palo Alto Networks will forward such request to End User for handling unless Palo Alto Networks is required by law to address such request.
e. Palo Alto Networks shall ensure that personnel it authorizes to process End User Personal Data have committed themselves to confidentiality or are under appropriate statutory obligation of confidentiality. Furthermore, except where required by applicable law, Palo Alto Networks will not share End User Personal Data with third parties other than with authorized sub-processors.
f. End User authorizes Palo Alto Networks to engage sub-processors, as described in the applicable Product documentation for the relevant Product, to process Personal Data. In the event Palo Alto Networks engages any new sub-processor it will:
i. update the applicable Product documentation;
ii. notify End ...
Processing as Data Processor